Linux explores new way of authenticating developers and their code | Hacker News Reader

Linux explores new way of authenticating developers and their code

zdnet.com

31 pointsCrankyBear6 comments

I really wish that Keybase would have taken off. I think it was a great balance between verification and ease of use. Again, Keybase didn't prevent someone from impersonating another, it just raised the cost. And sometimes that's enough.

Sorry, but how would this have prevented the xz backdoor? The article seems to be insinuating that it would have, but I don't see how it could.

xz backdoor? What's that?

https://news.ycombinator.com/item?id=47166473

- the video is well worth a watch.

Thanks, I'll give it a watch! <3

> The article seems to be insinuating that it would have.

I disagree, the article clearly states:

      Montgomery and others were careful to say that Linux ID 
      will not magically prevent another xz‑style supply‑chain 
      attack, but they argue it materially raises the cost.

Reply on news.ycombinator.com