HN user
Without a web of trust (sigh), a PKI (ugh), or some other mechanism to tie identities to trust metrics, this is essentially a complicated, very expensive, and fragile version of the shasum check npm already has.
The stance was without an agreed upon way of trusting public keys, you don't get any additional protection beyond shasum. Isn't that true?
Can someone explain to me why using a cached value for hashCode in an immutable string is a bad thing?
I think they mean tailoring in two ways:
1. Play stories local to where you live. 2. A lot of shows on NPR aren't straight news, so it'll remember which shows you particularly enjoy.
Moxie Marlinspike gave a talk at DEFCON 19 about how broken the CA model is and suggested an alternative.
The talk - https://www.youtube.com/watch?v=pDmj_xe7EIQ The alternative - http://convergence.io/