10 ms·
> like we looked back on not having absolutely everything running on HTTPS in the Snowden era. Apples and oranges and this is far, far worse. You can absolute
by donnachangstein 2y ago
> like we looked back on not having absolutely everything running on HTTPS in the Snowden era.
Apples and oranges and this is far, far worse.
You can absolutely ship signed, trusted code over standard HTTP. Microsoft did this for years and Debian and OpenBSD to name a few still do.
HTTPS does not assure provenance of code.
Anyone who doesn't understand this is very misinformed about what HTTPS does and doesn't do.
- genewitch 2y agoI think this depends on one's definition of "code"
- tedd4u 2y agoSorry, I wasn't clear. I meant only in the general sense of in the not too far past, the industry was content with a huge hole like only running login under HTTPS and no site traffic, which in hindsight seems insane. What I mean is the situation (explored in the rest of this thread) where many in the industry seem to be content with consuming code extensively from public repos without many obstacles to prevent a supply-chain attack. What I'm saying is that soon the industry will probably look back on this in the same way: "what were we thinking!?"