Hello, > nobody claims that 'guix authenticate' protect us against bad code, or?
There's just one goal we strive to achieve: to protect us from running or pulling in bad code. Nothing else matters. Bad code is bad because it *does* something bad, not because it was written by a "bad" or "good" person. However, the only thing authentication can tell you is whether the code was written by a "good" or "bad" person. Nothing less, nothing more. Cheers, Bost
