OCI is an antiquated format, not fit for modern security requirements

Posted May 22, 2025 22:24 UTC (Thu) by Cyberax (✭ supporter ✭, #52523)
In reply to: OCI is an antiquated format, not fit for modern security requirements by bluca
Parent article: The future of Flatpak

Can I verify dm-verity signatures in Java or Go?

Posted May 22, 2025 22:35 UTC (Thu) by bluca (subscriber, #118303) [Link]

Yes, as it's PKCS7, but there's no reason to, as it's the kernel that verifies them