• @jagged_circle@feddit.nl
    link
    fedilink
    English
    13 days ago

    Obviously you have no idea how bad x.509 is.

    The issue isnt just the developer. Its your connection. Thats why we have release signatures, and most repos on git dont have signed releases.

    • @AndrewZabar@lemmy.world
      link
      fedilink
      English
      12 days ago

      Well I was not really addressing the specific item that spawned this discussion thread, only the notion that was stated that one should only ever use the official stores.