codehash.db

codehash.db copied to clipboard

Organization: Key and signature filename syntax

1

This is a relatively minor organizational issue, but one worth considering early on. Currently, the filename syntax for keys and detached signatures on keys is [specified](https://github.com/rootkovska/codehash.db/tree/8b844f96b30eb54c876dd5463e0a8c710599de6e/witnesses/keys) as follows: > Key:...

andrewdavidwong

Organization: PGP signature types

2

Currently, we have this: ``` codehash.db/os/qubes/ ├── 3.2 │ ├── hash │ ├── hash.sig.joanna │ ├── origin.joanna │ └── origin.sig.joanna └── vendor_keys [...] ``` It's necessary that `hash.sig.joanna` exist as...

andrewdavidwong

Fails the laziness doctrine

3

Since the local hash is the same as the vendor hash there is nothing to stop a lazy user from building a database that asserts little but looks like it...

ramriot

proof->prove

brooss