I'm not saying having a dedicated code signing system isn't a good idea, I'm saying that the management overhead and additional risk created by changing the code signing tool to use a distributed system instead of being local only is completely out of scope with the benefit
I'm also saying that it could be a feature of a full-fledged product but, except in very specific case, it's not going to be a killer one
Discussion between Stephane and Jonat…
Discussion between Stephane and Jonat…