Hacker Newsnew | past | comments | ask | show | jobs | submit | llambiel's commentslogin

Also http://pithos.io/ backed by Cassandra


I agree with your concern. As a temporary "workaround" I've updated the article with a SHA256 checksum of the key. I'll chase the Nginx team for serving this key over https


We should really be verifying the fingerprint of the key itself, even if it is served over HTTPS.


Thanks for the update!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: