On 2024-10-03 11:29, Stefano Rivera wrote:
We should figure out what it would take to support sigstore in Debian source packages, assuming there is more adoption.
Having that support in uscan and the rest of our tooling would be amazing.That would let us support things like SSH signatures, like I encountered in #1023140.
In general, having viable alternatives to OpenPGP would open an interesting door for the general Debian ecosystem...
-- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ Louis-Philippe Véronneau ⢿⡄⠘⠷⠚⠋ pollo@debian.org / veronneau.org ⠈⠳⣄