You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/about/overview.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -42,7 +42,7 @@ Sigstore addresses these problems by helping users move away from a key-based si
42
42
The signer ideally forgoes using long-lived keypairs. With “keyless” or “ephemeral key” signing, users verify the artifact using the transparency log for signature verification rather than keys. Sigstore improves on traditional methods of signing to be more convenient and secure:
43
43
44
44
-**Convenience**: Users can take advantage of convenient tooling, easy container signing, and can even bypass the difficult problem of key management and rotation.
45
-
-**Security**: With Sigstore, the artifact is not just signed; it’s signed, verified, and witnessed.
45
+
-**Security**: With Sigstore, the artifact is not just signed; it’s signed with an ephemeral key, associated with a known identity, and publicly auditable.
0 commit comments