3 ms·
> Cryptographic signatures can prove that. Assuming you have a fully trusted and bootstrapped side channel to get the public key from. And assuming that the co
by insanitybit 3y ago
> Cryptographic signatures can prove that.
Assuming you have a fully trusted and bootstrapped side channel to get the public key from. And assuming that the compromise that resulted in this maliciously published binary also didn't compromise the private key.
Both are tall orders.