Stuff here about verifying publisher signatures, sigstore.dev commentary. tl;dw: sigstore will be a little difficult to adopt wholesale, but atproto already has some of the workings of it built-in
Stuff here about verifying publisher signatures, sigstore.dev commentary. tl;dw: sigstore will be a little difficult to adopt wholesale, but atproto already has some of the workings of it built-in