kreyszig on Nostr: Does it verify that packages are properly signed orndoes it blindly trust GitHub as a ...
Does it verify that packages are properly signed orndoes it blindly trust GitHub as a source?
Published at
2023-08-22 11:46:19Event JSON
{
"id": "6c9310a33b2a31309e30bb10e616dda367d2791ebd09689c7b3f4e45700425e5",
"pubkey": "00cb4f91e25fc4a6c1ff92a6e3eeae8335de7c4f221509920d6a705797d98578",
"created_at": 1692704779,
"kind": 1,
"tags": [
[
"e",
"96730705ae524220fb9acf432e48c4fbc40a3a9680cd158085b8a6dd08b2ddcc",
"",
"reply"
],
[
"p",
"30782a8323b7c98b172c5a2af7206bb8283c655be6ddce11133611a03d5f1177"
]
],
"content": "Does it verify that packages are properly signed orndoes it blindly trust GitHub as a source?",
"sig": "20d1e4ffec4705d83ccec88e9ff7bf7ec61c2326f75978f34186ec7f73aeafdfce70e17ab084249a0a98d73e0f10104b745116bfce3ecf92edbf3d453aeaa26a"
}