Signing .jars is not worth the effort

Re:Signing .jars is not worth the effort by GordonS on Sunday July 26, 2020 @01:40PM (#23958686)

Huh, I had no idea there was even such a thing as SSH certificates!

Presuming you mean X.509 certificates, is this part of the standard spec (e.g. should work with OpenSSH etc)? Do you know if it works with PuTTY?

[ Parent | on HN ]

Re:Signing .jars is not worth the effort by jbreiding on Sunday July 26, 2020 @02:36PM (#23959109)

Here is a guide I've found useful in the subject, https://engineering.fb.com/security/scalable-and-secure-acce....

[ Parent | on HN ]

Re:Signing .jars is not worth the effort by TimWolla on Sunday July 26, 2020 @02:00PM (#23958860)

They are not based on X.509. I recommend taking a look at the CERTIFICATES section of the ssh-keygen man page, because I am unable to find a good reference on the web right now.

[ Parent | on HN ]