Protecting the Integrity of Your Downloads (Part #3)

    Intro In the first two installments of this series (here and here), we discovered current best practices for ensuring file integrity when downloading from the web, the potential dangers they have, and traditional ways of verifying a downloaded file’s integrity using checksums. In this blog, we will dive deeper into the process of […]

Free Docker Container Integrity Verification Sought and Found

    One dev in his search to find a way to continuously verify his Docker container integrity recently notified us about his search and the answer he found. Below we share his story and a cool find he made as well with the community.    The Search for Finding Docker Container Integrity Verification Got […]

The Distributed Ledger Technology at the Center of the Code Signing Disruption

Ever since the software industry witnessed the introduction of code signing, software users have learned to rely on digital certificates and GPG to verify the integrity and identity of software. Little questions were raised concerning the security of the certificates and GPG themselves. The “severe” scrutiny of the software publisher by the certificate authority and […]