Subj : [$] Eliminating long-lived credentials with trusted publishing
To   : All
From : LWN.net
Date : Tue Jun 09 2026 19:00:06

[$] Eliminating long-lived credentials with trusted publishing

Date:
Tue, 09 Jun 2026 17:50:49 +0000

Description:
Trusted
publishing is an authentication mechanism that relies on
short-lived credentials to reduce the risk of supply-chain attacks. At
the 2026 Open
Source Summit North America , Mike Fiedler walked the audience
through why trusted publishing exists, how it works, and made the case
for its adoption. It is not a silver bullet against all attacks, but
it does offer protection against theft of long-lived credentials used
to publish to package registries.

======================================================================
Link to news story:
https://lwn.net/Articles/1076205/


--- Mystic BBS v1.12 A49 (Linux/64)
 * Origin: tqwNet UK HUB @ hub.uk.erb.pw (1337:1/100)

.