News for hackers. Stuff that matters.
Re:NPM debug and chalk packages compromised by benchloftbrunch on Tuesday September 09, 2025 @10:28AM (#45182425)
> X509 certificate

It should be a PGP or SSH key, absolutely not an X509 certificate (unless you allow self signed).

Personal identity keys should be fully autonomous and not contingent on the formal recognition of any external authority.

There are no comments on this comment yet.