Hacker News with Generative AI: Code Signing

A brief history of code signing at Mozilla (hearsum.ca)
Shipping large software to end-user devices is a complicated process. Shipping large software securely to end-user devices is even more complicated. Signing the things that ship to end-user devices is one of those complications, and it gets even more complicated when you sign thousands of artifacts per day.

Security, Software, Mozilla, History, Code Signing

246 points by todsacerdoti 319 days ago | 88 comments

Sigstore: Making sure your software is what it claims to be (sigstore.dev)
Loading...

Software Security, Code Signing, Open Source, Trust, Digital Signatures

119 points by saikatsg 336 days ago | 45 comments

The Challenges of Building a Sigstore Implementation from Scratch [video] (youtube.com)

Security, Software Development, Open Source, Video, Code Signing

4 points by mooreds 397 days ago | 0 comments

An open-source implementation of Apple code signing and notarization (2022) (gregoryszorc.com)

Open Source, Security, Apple, Code Signing, Notarization

149 points by tosh 617 days ago | 24 comments