Linux

7654 readers

278 users here now

A community for everything relating to the GNU/Linux operating system

Also check out:

[email protected]
[email protected]

Original icon base courtesy of [email protected] and The GIMP

founded 2 years ago

MODERATORS

[email protected]

158

Flatpak is not perfect, but it's getting better (thelibre.news)

submitted 5 days ago by [email protected] to c/[email protected]

34 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 7 points 4 days ago

Best to do both, really, so a record of using a consistent public key is created.

Then supply chain attacks might be noticed. If someone manages to replace the file on the webserver but can't get to the signing key you've prevented the attack.

permalink
fedilink
source
parent