4 ms·
Yep, Nix not affected at all is pretty impressive. On the other hand this goes against the "verify before parse" principle so I have mixed feelings on Nix's ap
by rfoo 4y ago
Yep, Nix not affected at all is pretty impressive.
On the other hand this goes against the "verify before parse" principle so I have mixed feelings on Nix's approach.
- Foxboron 4y agoThey don't really do any source authentication at all. There is no strategy for checking gpg/minisign/whatever signatures and fetching keys to validate these things.