Re: upstream source code authenticity checking

[Dag-Erling Smørgrav <des () des no>]

Kurt Seifried <kseifried () redhat com> writes:
> This makes no sense. So you don't trust their signature because they
> have to "earn trust", but you do trust their software and you compile
> and run it? That's literally insane.

This is exactly the logic used by web browsers to justify scaring users
away from https sites that haven't payed the Verisign tax...

DES
-- 
Dag-Erling Smørgrav - des () des no