So... If you released some open source software and then inscribed the binary hash of the software on #btc, could future users always compare the hash of software they download to that immutable hash on chain? instead of having to download the sha256 checksum file from the same source and then try and confirm pgp key validity out of band?
Could make source file verification easier and perfectly immutable.
rot13maxi (npub1mxr…0htc)
Semi-Normal /
npub1h3…6z7df
2023-02-16 16:44:54
Author Public Key
npub1h3z9uaydyjrr5rwaktzt3lned3ykztktda9lv0n7n2tu9rt27neqt6z7dfPublished at
2023-02-16 16:44:54Event JSON
{
"id": "992a7a1c61c2dcbd028757746b55a89f08f90f679f78abff1c685da37b5b0dd5",
"pubkey": "bc445e748d24863a0dddb2c4b8fe796c49612ecb6f4bf63e7e9a97c28d6af4f2",
"created_at": 1676565894,
"kind": 1,
"tags": [
[
"p",
"d987084c48390a290f5d2a34603ae64f55137d9b4affced8c0eae030eb222a25"
]
],
"content": "So... If you released some open source software and then inscribed the binary hash of the software on #btc, could future users always compare the hash of software they download to that immutable hash on chain? instead of having to download the sha256 checksum file from the same source and then try and confirm pgp key validity out of band?\n\nCould make source file verification easier and perfectly immutable.\n\n#[0] ",
"sig": "c2c58311797611c1d63c562e7d2a435682756731d7081b2c0b3cb73590c35736013c831fbe1dee045d118cf0d86606e2ef7484f6f37e94dda73a5de9f9dedc9e"
}