Timeline for gpg key size of 4096 and "the future is ECC"
Current License: CC BY-SA 4.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 4, 2023 at 11:36 | comment | added | Thomas Guyot-Sionnest | You can actually use X.509 to sign elf binaries - the only difference is that Linux has no standard way of securely checking file signatures before loading executable code. There has been various options over the years, and there are now frameworks making it possible to implement these checks with some levels of automation, but there are no standards just yet. PGP has been mainly used in Linux as a convenience (easier/cheaper to build chain of trusts than get X.509 code signing certs) and because there's no run-time verification anyway. | |
| Jul 3, 2023 at 4:47 | history | answered | ARGYROU MINAS | CC BY-SA 4.0 |