News for hackers. Stuff that matters.

A comment on Sigstore protects Apt archives: apt-verify and apt-sigstore. Parent comment

Re:Sigstore protects Apt archives: apt-verify and apt-sigstore by klysm on Sunday April 16, 2023 @11:56AM (#35591162)
I don’t see how pgp and sigstore are equivalent
[ Parent | on HN ]
Re:Sigstore protects Apt archives: apt-verify and apt-sigstore by dlor on Sunday April 16, 2023 @12:10PM (#35591289)
They have similarities in that they both can be used to sign things, but the architecture is completely different and sigstore is designed for different tradeoff - namely to be much easier to get started with and use.
[ Parent | on HN ]
Re:Sigstore protects Apt archives: apt-verify and apt-sigstore by bombolo on Sunday April 16, 2023 @06:09PM (#35594720)
sigstore is trying to replace pgp signing adding cloud?
[ Parent | on HN ]