Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore

Kelechi G. Kalu, Sofia Okorafor, Tanmay Singla +3

Software signing is the most robust method for ensuring the integrity and authenticity of components in a software supply chain. Legacy key-managed signing tools (e.g., OpenPGP) bu…