News for hackers. Stuff that matters.
Re:OpenPubKey and Sigstore by dv_dt on Friday October 06, 2023 @09:14AM (#37790354)
Another layer of indirection often solves things in software engineering. You need a key store that allows use control via multiple identity sources so a backup path can add remove or update allowed sources. If google locks a particular account, drop it as an allowed source, add a different one.

This of course expands the attack surface - indirection comes at a cost.

There are no comments on this comment yet.