On 2024-10-03 11:29, Stefano Rivera wrote:
We should figure out what it would take to support sigstore in Debian
source packages, assuming there is more adoption.
Having that support in uscan and the rest of our tooling would be amazing.
That would let us support things like SSH signatures, like I encountered
in #1023140.
In general, having viable alternatives to OpenPGP would open an
interesting door for the general Debian ecosystem...
--
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Louis-Philippe Véronneau
⢿⡄⠘⠷⠚⠋ po...@debian.org / veronneau.org
⠈⠳⣄
