computerenjoyer

4 ms·

1. 1.▲
   by computerenjoyer 3y ago

   I agree that RedHat and Debian use OpenPGP mostly for its signature only and do not rely on any Web of Trust or other infrastructure for key distribution in the basic case. As a side-note just for fun: It's interesting to consider thir
2. 2.▲
   by computerenjoyer 3y ago

   My guess is that there are a lot more "signature verification events" on Linux that pull from a deb or yum repository than there are on Windows servers, both because the mean server in terms of global usage seems to be Linux (thou
3. 3.▲
   by computerenjoyer 3y ago

   OK, fair point regarding bespoke PKI on Windows/Mac being more common. I do agree with that. I'll amend my statement to: PGP is by far the most common standard for server-side software distribution. I'll also quickly add that
4. 4.▲
   by computerenjoyer 3y ago

   Yes, it does matter. PGP is by far the most common standard for signatures used in software distribution (Git tags, RPM packages, Yum repos, Deb repos, ad-hoc signature schemes, etc.), and nothing else is particularly close in terms of numb