Re:Npm install could be dangerous
by nailer on Monday January 26, 2015 @12:13PM
(#8948138)
Fedora and RHEL have had mandatory signing since before either existed (back when it was RHL).
Debian has had what we'd call 'EV' level security these days for about 15 years - people bringing their passports in and reading out their GPG public keys at LUGs.
Debian has had what we'd call 'EV' level security these days for about 15 years - people bringing their passports in and reading out their GPG public keys at LUGs.