KernelCI now testing Linux Rust code (Collabora blog)
KernelCI now testing Linux Rust code (Collabora blog)
Posted Dec 12, 2022 15:04 UTC (Mon) by ms-tg (subscriber, #89231)Parent article: KernelCI now testing Linux Rust code (Collabora blog)
1) `rustup` does not yet validate signatures of downloads, but does use only HTTPS:
* [rustup book - Security section](https://rust-lang.github.io/rustup/security.html)
2) Work is underway to implement a fully-design trust model with PGP signature verification for rustup:
* https://github.com/rust-lang/rustup/issues/2028
* https://github.com/rust-lang/rustup/issues/2027
Just sharing this info as a place to jump in for anyone who wanted to learn more -- the rust project does appear to be on a longer-term trajectory to add a full trust model incorporating signature verification, with key revocation etc?