DanConwayDev on Nostr: but if you don't build yourself, you are trusting whoever has given you the hash. ...
but if you don't build yourself, you are trusting whoever has given you the hash. getting trust assertions from a verity of sources that a version should produce that hash means that you are drastically reducing your trust in any one source.
Published at
2024-08-28 08:32:07Event JSON
{
"id": "1c7829e61b8d8b7829d6ae492fb274db2f6fb8a36a5189086d2036a4f39cbf32",
"pubkey": "a008def15796fba9a0d6fab04e8fd57089285d9fd505da5a83fe8aad57a3564d",
"created_at": 1724833927,
"kind": 1,
"tags": [
[
"e",
"6c7e707f218aaeeca84e64414eaafecb92d3e1ff19c394021bef121b83a6a793",
"wss://nos.lol/",
"root"
],
[
"e",
"91299d32142a94a344d251723db810e10620e5d257c22e88ec05979581173303",
"wss://nos.lol/",
"reply"
],
[
"p",
"2bb507e8086248747d2ec5009a70ccdbe0be9310fa612952923c8579e5aa8044",
"",
"mention"
]
],
"content": "but if you don't build yourself, you are trusting whoever has given you the hash. getting trust assertions from a verity of sources that a version should produce that hash means that you are drastically reducing your trust in any one source.",
"sig": "d862902991f72d6cb491103e4358d5cef40fac7525a426b0e846706046e15f379cbc5d1f0044192c2d6314b68efd79a9e9dc78b57da97c4610da8b0fe2189aa6"
}