... | ... | @@ -2213,7 +2213,8 @@ Update, 2022-04-20: someone actually went through the trouble of |
|
|
[auditing the transparency log](https://tlog.linderud.dev/), which is an interesting exercise
|
|
|
in itself. The [verifier source code](https://github.com/Foxboron/kernel.org-git-verifier) is available, but probably
|
|
|
too specific to Linux for our use case. [Their notes are also
|
|
|
interesting](https://linderud.dev/blog/monitoring-the-kernel.org-transparency-log-for-a-year/).
|
|
|
interesting](https://linderud.dev/blog/monitoring-the-kernel.org-transparency-log-for-a-year/). This is also [in the kernel documentation](https://korg.docs.kernel.org/gitolite/transparency-log.html) and the
|
|
|
logs themselves are in [this git repository](https://git.kernel.org/pub/scm/infra/transparency-logs/gitolite/git/1.git/).
|
|
|
|
|
|
### Ryabitsev: Secure Scuttlebutt
|
|
|
|
... | ... | |