Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Right, but what is the solution if this "normal security practice" relies on having a 3rd party sign your stuff but they refuse to do so, for non-security reasons?


Once again, it's demonstrated for us, trusted third parties are security holes.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: