• jagged_circle@feddit.nl
    link
    fedilink
    English
    arrow-up
    1
    ·
    18 hours ago

    Obviously you have no idea how bad x.509 is.

    The issue isnt just the developer. Its your connection. Thats why we have release signatures, and most repos on git dont have signed releases.

    • AndrewZabar@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      47 minutes ago

      Well I was not really addressing the specific item that spawned this discussion thread, only the notion that was stated that one should only ever use the official stores.