3 ms·
Say you’re writing some code that may be illegal (piracy stream, rips off another API with licensed content, etc). I would want to deny that it was me (but then
by sodality2 4y ago
Say you’re writing some code that may be illegal (piracy stream, rips off another API with licensed content, etc). I would want to deny that it was me (but then, i wouldn’t connect it to my real-life identity at all).
- ducktective 4y agoIt's that serious? Wouldn't the offended party just ask for the content/service/repo be removed?
- sodality2 4y agoWith the digital footprint these days, that might impede employment in the future in certain industries or sectors, especially if it’s tied to your name.
- ducktective 4y ago>if it’s tied to your name How can this be proved? Even with signing, anyone can impersonate anyone.
- Volundr 4y agoThe entire point of the signature is that it can't be forged. If a commit is signed with your private keys, I can reasonably conclude you authored it.
- heartbreak 4y agoI know this is a solved problem in certain contexts, but realistically how does a third party prove that your private keys are yours?
- dinkledunk 4y agoBecause if you're signing your commits you're probably also the type of person to sign your email with the same key.
- palata 4y agoAdding a data point to your statistics: I sign commits and packages I maintain (when it applies), not my emails.
- tekno45 4y agois it not enough to sign it and burn the keys? PGP encrypted public messages is common even on the dark web.
- fomine3 4y agoObvious recent case is Tornado Cash.