korrents

korrents · piece

My brave new code-signing world

Chris Wellons · 25 Apr 2026 · nullprogram.com

2 korrents from this piece

Chris Wellons did not write this page.

Every claim below was made in this piece, quoted word for word and numbered in the order the piece makes them, so you can read it there rather than take our word for it. The sentence above each quote is our reading of the claim, not their wording. Each quote was checked against a stored copy of the page at build time; where the two differ, the quote is the fact.

  1. The most popular use case is code-signing with self-signed certificates, but that actually makes everything worse.
  2. the AI breezes through the GitHub UI, but struggles through the Azure portal - objective evidence of how awful it is.