• 0 Posts
  • 9 Comments
Joined 3 years ago
cake
Cake day: August 6th, 2023

help-circle




  • It appears so, inside India anyway.
    I saw some of the compromised certs were code signing ones, but it seems the “DSC” certificate infrastructure they advertise for documents is something else entirely (“issued under the Government of India guidelines”).

    The kind of cert that lets you sign a pdf and have everyone see it pop up in adobe reader won’t be a thing anymore since they’ll end their CA activities. (Chrome already removed their root cert, many other places will have done the same. Who wants certs that don’t work everywhere?)

    Also, given the state of emudhras online presence I saw when I just looked all that up, I’m not convinced the company will be around much longer either. One of the first domains I landed on had a cert that expired in August. Another domain is completely dead.





  • I’ve had it on my todo for years to work through ddc and trusting trust.
    Which is a method to verify a compiler is matching its source and thus trustworthy.

    An orthogonal approach is reproducible builds, which among many benefits can make sure a few people verifying things benefit everyone who can then see they have the same verified binaries.