news.volyx.in

PuTTY has a new website (putty.software)

506 points by GalaxySnail · 346 days ago · 283 comments on HN

Article summary

PuTTY, a free software SSH client, has a new website. The new website is announced on the original official site, and the creator, Simon Tatham, has also posted about it on his social media. The new website can be found at putty.software. The original site will likely still be available for downloads and information.

Main themes

  • PuTTY new website
  • Trust and verification
  • Software supply chain security
  • Mastodon and social media
  • Identity verification online

What commenters say

  • The new PuTTY website's legitimacy can be verified through a link on the original official site and a validated link on the creator's social media profile.
  • Relying on a social media profile for verification of a software project's website is not a secure or trustworthy method.
  • The use of a specific HTML attribute to link a website to a social media profile can provide some assurance of identity, but it is not foolproof.
  • If an attacker has access to edit a website's HTML, the entire chain of trust is already compromised, making additional verification methods unnecessary.
  • Verifying the identity of a software project's creator or maintainer through online means is inherently difficult and prone to errors.
  • The Mastodon platform's method of verifying accounts through links and meta tags is a simple and effective way to establish a connection between a website and a social media profile.
  • In the context of critical software like PuTTY, additional verification steps should be taken to ensure the legitimacy of a new website or download source.
  • The complexity of online identity verification is a significant challenge, and no single method can provide absolute assurance of trustworthiness.