takinbrrrr on Nostr: for something as important as verifying binaries for bitcoin software, it's a wonder ...
for something as important as verifying binaries for bitcoin software, it's a wonder that very few people do it.
1. few developers sign their binaries
2. few users verify those binaries
we can do better and for those developers who sign their binaries, unless you suspect your master key has been compromised, there's no need to rotate it. that's what subkeys are for.
gm!
Published at
2025-03-28 11:10:42Event JSON
{
"id": "846e74804597d80bbc2d5adf053489da7bb57ba9c78478f931cffcbff767d8f1",
"pubkey": "6e68f1849d4e64d4b65f56fe58f36046dac68703442c4b211279b0b0ab1b456d",
"created_at": 1743160242,
"kind": 1,
"tags": [],
"content": "for something as important as verifying binaries for bitcoin software, it's a wonder that very few people do it.\n\n1. few developers sign their binaries\n2. few users verify those binaries\n\nwe can do better and for those developers who sign their binaries, unless you suspect your master key has been compromised, there's no need to rotate it. that's what subkeys are for.\n\ngm!",
"sig": "2d4b6f97c1734ced90f58c26b1d2a0957dd8527858f72a09955b898c502b39735dcacd3f63ec506e898150113433dddd2ee8c01d8c695087ebacf205eb4c7026"
}