Mastodon Feed
Boosted by jwz:
coderanger@cloudisland.nz ("Noah K") wrote:
I don't mean to be a killjoy but "vouching for trusted people" is not a scalable way to build a software ecosystem. I was there, I ran signing parties, I was a CAcert assurer, I've got a strong-set GPG key in a hardware token, none of it worked beyond the most fringe of the fringe dorks. You get a few ossified relationships between major public figures and a small ring of friends around each, and then your permissions are effectively locked down forever. Do you want to live in the world where you need to have a million followers to launch a new framework?
The ecosystem we've all been building in and on top of for decades is so deeply permeated by "assume good intent" at all levels that I'm not sure people are ready for the velocity reduction that is coming after the next few claw-based JiaTans. The first one will be an oddity, but eventually we're going to have to grapple with buying huge vertically integrated dev stacks from Trusted Vendors™ or we make everything from scratch again.