4 ms·
I don’t see how pgp and sigstore are equivalent
I don’t see how pgp and sigstore are equivalent
They have similarities in that they both can be used to sign things, but the architecture is completely different and sigstore is designed for different tradeoff - namely to be much easier to get started with and use.
sigstore is trying to replace pgp signing adding cloud?