Software is distributed on Linux as an AppImage, which has no native sandboxing and should be considered untrusted. Best practice for releases are publishing a PGP public key on a keyserver and offering a signature file created with this keypair alongside each release. This allows user to verify wi…

Application Security: consider PGP signed releases

ynts October 12, 2023, 10:10pm 2

*typo “considered trusted”

also: bump

Cursor is not code signed on mac?