Please review the draft for March's report
David A. Wheeler
dwheeler at dwheeler.com
Tue Apr 6 14:39:18 UTC 2021
Press releases are not the best way to learn technical details :-).
I suggest adding a link to more details e.g.:
See <a href="https://sigstore.dev/what_is_sigstore/“>”What is sigstore"</a> for more details.
I think mentioning sigstore is value. Reproducible builds let you verify that
a given build *is* generated from a given source; sigstore can let you
verify that you got the *correct* source or build.
--- David A. Wheeler
More information about the rb-general