Matt Cockayne on Mythryl: “Signing releases sits on the to-do list for years looking bigger…”

Signing releases sits on the to-do list for years looking bigger than it is. Ten minutes, a throwaway key, and gpg saying Good signature (then BAD when you tamper with the file) tells you what a signature actually is. Every command validated against v0.5.3. #golang

phpboyscout.ukA good signature in ten minutesGenerate a throwaway keypair, sign a file with sigillum, verify it with gpg, then break it and watch the check fail.

15/10/26, 9:15 am0 reposts0 likes

Post