This is key lesson from the Bitcoin repo. The Bitcoin-Core community can’t trust a centralized repo, only the signed merge commits, which means you must verify the signature of the code after download! See “verify signature” in my tutorial <a href="https://github.com/ChristopherA/Learning-Bitcoin-from-the-Command-Line/blob/master/02_1_Setting_Up_a_Bitcoin-Core_VPS_by_Hand.md">https://github.com/ChristopherA/Learning-Bitcoin-from-the-Command-Line/blob/master/02_1_Setting_Up_a_Bitcoin-Core_VPS_by_Hand.md</a> <a href="https://twitter.com/peterktodd/status/1047854713029312512">https://twitter.com/peterktodd/status/1047854713029312512</a>

Christopher Allen

@ChristopherA

This is key lesson from the Bitcoin repo. The Bitcoin-Core community can’t trust a centralized repo, only the signed merge commits, which means you must verify the signature of the code after download! See “verify signature” in my tutorial https://github.com/ChristopherA/Learning-Bitcoin-from-the-Command-Line/blob/master/02_1_Setting_Up_a_Bitcoin-Core_VPS_by_Hand.md https://twitter.com/peterktodd/status/1047854713029312512

10/4/2018, 10:44:19 AM

Favs: 34

Retweets: 12

link