Hacker News new | ask | show | jobs
by slavik81 2389 days ago
Why? If I sign a package, that's proof I endorse the contents... but how do you know I'm not a malware author?