News for hackers. Stuff that matters.
Re:API responses should be signed by feanaro on Monday January 20, 2020 @05:36AM (#22097888)
This is not the solution for this essentially unsolvable problem. It offers a false sense of assurance since there will undoubtedly be ways of extracting the signature apparatus and then using it to produce fake signatures. It also creates a dangerous opportunity for all kinds of authoritarian actors to inject tracking and identifying information in digital artefacts.

It's much less painful to abandon the idea that photographs, videos and sound can be ultimately trusted.

There are no comments on this comment yet.