We need a better way to sign and verify software. Clearly companies like Microsoft and Apple have not been good for the open source communities and are inhibiting innovation.
We need better OSes such that signing of software is not required to keep your computer safe.
loading story #47688136
Just add code cert generation to letsencrypt, it's not like MS validates the code that you sign used certs from them anyway
loading story #47687480
I think this is fundamentally an unsolvable problem and I'm not even sure it's worth pursuing.
Any large scale signing platform will have large oversights and be rendered useless. See the appstore / play store/windows...
loading story #47688336