Hacker News new | ask | show | jobs
by endian 5481 days ago
"It should also be noted that Glitter uses HTTPS S3 URLs to eliminate the need for the maintiance of public/private keys for Sparkle"

Eliminate? That assumes you can trust both Amazon and the CAs. For some products (Tor, Bitcoin...), that's insane.
1 comments
bradgessler 5480 days ago
Correct. If you don't trust Amazon and the CA's then you shouldn't use Glitter.

While it might be insane for your requirements, its not for ours and we trust both S3 and the respective certificate authorities for our software distribution. Glitter is very bias towards this to achieve its level of simplicity.

link