|
|
Subscribe / Log in / New account

KernelCI now testing Linux Rust code (Collabora blog)

KernelCI now testing Linux Rust code (Collabora blog)

Posted Dec 12, 2022 15:04 UTC (Mon) by ms-tg (subscriber, #89231)
Parent article: KernelCI now testing Linux Rust code (Collabora blog)

Hi! Here are some facts I observed about `rustup` and **signature verification** that don't seem to have been shared yet in this discussion:

1) `rustup` does not yet validate signatures of downloads, but does use only HTTPS:

* [rustup book - Security section](https://rust-lang.github.io/rustup/security.html)

2) Work is underway to implement a fully-design trust model with PGP signature verification for rustup:

* https://github.com/rust-lang/rustup/issues/2028
* https://github.com/rust-lang/rustup/issues/2027

Just sharing this info as a place to jump in for anyone who wanted to learn more -- the rust project does appear to be on a longer-term trajectory to add a full trust model incorporating signature verification, with key revocation etc?


to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds