{"id":32413,"date":"2023-10-05T23:52:31","date_gmt":"2023-10-05T23:52:31","guid":{"rendered":"https:\/\/www.rbsitsoftwaresolution.com\/blog\/new-cryptographic-protocol-aims-to-bolster-open-source-software-security.html"},"modified":"2023-10-05T23:52:31","modified_gmt":"2023-10-05T23:52:31","slug":"new-cryptographic-protocol-aims-to-bolster-open-source-software-security","status":"publish","type":"post","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/new-cryptographic-protocol-aims-to-bolster-open-source-software-security.html","title":{"rendered":"New cryptographic protocol aims to bolster open-source software security"},"content":{"rendered":"
<\/p>\n

This process makes any application using OpenID Connect for authentication much more secure without any other changes. OpenPubkey is transparent to users and OpenID providers. An OpenID provider can not even determine that OpenPubkey is being used. This makes OpenPubkey fully compatible with existing OpenID providers. This compatability includes Google, Azure\/Microsoft, Okta, OneLogin, and Keycloak. This project is not adding any new OpenID Connect trusted parties.<\/p>\n

OpenPubkey is already being used to authenticate signed messages and identities for users with accounts on Google, Microsoft, Okta, and OneLogin. By augmenting OpenID Connect, OpenSubkey will enable users and workloads to sign artifacts under their OpenID identity. This capability is instrumental for applications requiring secure remote access and software supply chain security features, including signed builds, deployments, and code commits.<\/p>\n

Also: 6 simple cybersecurity rules to live by<\/a><\/strong><\/p>\n

That level of application all sounds good in practise, but you should keep in mind that even OpenPubkey’s reference implementation is a work in progress. For example, the OpenPubkey client still needs support for the Github OpenID Provider, the Azure OpenID Provider (OP).<\/p>\n

Jim Zemlin, the Linux Foundation’s executive director, is enthusiastic about hosting the OpenPubkey Project: “This initiative is poised to be a cornerstone in enhancing the security fabric of the open-source software community.” Zemlin extended an invitation to developers and organizations to join hands in this collaborative venture aimed at amplifying software supply chain security.<\/p>\n

TestifySec<\/a>, a prominent cybersecurity player. has endorsed the initiative. Cole Kennedy, CEO of TestifySec, commended the OpenPubkey approach of enabling easy and reliable signing: “The collaboration between Docker and BastionZero has our unwavering support. We are optimistic about the immense benefits the broader community stands to gain.”\u00a0<\/p>\n

Also: Linux tries to dump Windows’ notoriously insecure RNDIS protocol<\/a><\/strong><\/p>\n

Interested in learning more about getting OpenPubkey ready for production? Check out the OpenPubkey GitHub page<\/a> and get to work. This is an authentication and security project that shows a lot of promise.\u00a0<\/p>\n

Featured<\/h4>\n

<\/p>\n

iPhone 15 Pro review: Prepare to be dazzled
\n <\/a><\/p>\n

Generative AI will far surpass what ChatGPT can do. Here’s everything on how the tech advances
\n <\/a><\/p>\n

Google Pixel 8 vs. Google Pixel 8 Pro: Which one is right for you?
\n <\/a><\/p>\n

The best USB-C cables for the iPhone 15: What the experts recommend
\n <\/a> <\/p>\n

iPhone 15 Pro review: Prepare to be dazzled
\n <\/a><\/li>\n

  • \n

    Generative AI will far surpass what ChatGPT can do. Here’s everything on how the tech advances
    \n <\/a><\/li>\n

  • \n

    Google Pixel 8 vs. Google Pixel 8 Pro: Which one is right for you?
    \n <\/a><\/li>\n

  • \n

    The best USB-C cables for the iPhone 15: What the experts recommend
    \n <\/a><\/li>\n<\/ul>\n

    Article source: https:\/\/www.zdnet.com\/article\/new-cryptographic-protocol-aims-to-bolster-open-source-software-security\/#ftag=RSSbaffb68<\/p>","protected":false},"excerpt":{"rendered":"

    This process makes any application using OpenID Connect for authentication much more secure without any other changes. OpenPubkey is transparent to users and OpenID providers. An OpenID provider can not <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[31],"tags":[34],"class_list":["post-32413","post","type-post","status-publish","format-standard","hentry","category-linux-updates","tag-linux-updates"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t