Comment on Replacement for Docker Content Trust (DCT)

<- View Parent
maltfield@slrpnk.net ⁨22⁩ ⁨hours⁩ ago

Yes, you have to trust someone.

My point is that cryptographic signatures can reduce that risk from having to trust tens of thousands of people to just one person.

That’s a hugely meaningful reduction of risk.

original
Sort:hotnewtop