GitHub Is Microsoft’s $7.5B Undo Button

Re:GitHub Is Microsoft’s $7.5B Undo Button by kumarvvr on Thursday June 07, 2018 @12:44AM (#17253350)

I think the problem is with identity management.

Maybe a universal identity provider is required.

[ Parent | on HN ]

Re:GitHub Is Microsoft’s $7.5B Undo Button by iamtew on Thursday June 07, 2018 @01:20AM (#17253469)

You could just GPG sign your commits, then you can know for sure where the commit is coming from.

[ Parent | on HN ]

Re:GitHub Is Microsoft’s $7.5B Undo Button by zaarn on Thursday June 07, 2018 @03:30AM (#17253968)

Anyone can create a GPG key and start signing commits.

GPG does not solve identity, it requires additional networking (like WoT or TOFU) before it can begin to function as an identity tool.

[ Parent | on HN ]