Hacker News new | ask | show | jobs
by traceroute66 14 days ago
> Does Debian already provide signature on .deb files

Signing files is 90's security.

Yes, of course in 2026 it is still perfectly capable of proving a file has not been tampered with.

The problem is that is insufficient in 2026.

See the "Goals to protect against specific attacks" section[1] of TUF (The Update Framework) spec to give you an idea of modern attack vectors.

[1] https://theupdateframework.github.io/specification/v1.0.33/#...