Yeah, this is making me real glad that I know C well enough to stop being afraid of it.
Pinning certificates in a browser was a brilliant idea for Chrome because web browsers are not made for technical users.
But pinning certificates in a compiler? It's reminding me of that one time where the NSA handed out DES constants to use and said "just trust me, bro". I don't even care that the DES constants ultimately ended up being protections against differential-cryptanalysis SCA (which, btw, the NSA then undermined by arguing for shorter keylengths in "export-grade crypto").
Pinning certificates in a browser was a brilliant idea for Chrome because web browsers are not made for technical users.
But pinning certificates in a compiler? It's reminding me of that one time where the NSA handed out DES constants to use and said "just trust me, bro". I don't even care that the DES constants ultimately ended up being protections against differential-cryptanalysis SCA (which, btw, the NSA then undermined by arguing for shorter keylengths in "export-grade crypto").
Get off my lawn.