Re:Crev: dependency vetting with a web of trust
by edraferi on Friday January 04, 2019 @05:02PM
(#18828101)
Pretty cool. Long way to go, but great idea.
I like this:
> Design is open for supporting PGP, Salty, Keybase, and whatever else in the future.
> Note: Systems like that don't carry enough information. Just because you verified that someones PGP really belong to them, doesn't mean you trust their code review judgment. But the identity/singing system could be reused.
I like this:
> Design is open for supporting PGP, Salty, Keybase, and whatever else in the future.
> Note: Systems like that don't carry enough information. Just because you verified that someones PGP really belong to them, doesn't mean you trust their code review judgment. But the identity/singing system could be reused.