BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//talks.nixcon.org//nixcon-2024//talk//VBGYZ9
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-nixcon-2024-VBGYZ9@talks.nixcon.org
DTSTART;TZID=CET:20241026T101000
DTEND;TZID=CET:20241026T103500
DESCRIPTION:Nix build expressions will often rely on other expressions as d
 ependencies\, most commonly Nixpkgs. However\, those could be modified by 
 machine-in-the-middle attacks. Providing users with the means to verify cr
 yptographic signatures on expressions could relieve this attack vector and
  strengthen Nix' resilience.\n\nThis talk will discuss update verification
  for Nix and NixOS with a focus on Git signatures. It will explain Guix' a
 uthentication mechanism and [RFC 100](https://github.com/NixOS/rfcs/pull/1
 00) as an attempt to bring it to Nixpkgs. Subsequently\, it will sketch ou
 t potential paths forward\, considering use cases and additional burdens o
 n developers.
DTSTAMP:20260710T072414Z
LOCATION:Arena
SUMMARY:Signed Nix Expressions - Finn Landweber
URL:https://talks.nixcon.org/nixcon-2024/talk/VBGYZ9/
END:VEVENT
END:VCALENDAR