<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Signatures on VPNW.com</title>
    <link>https://vpnw.com/tags/signatures/</link>
    <description>Recent content in Signatures on VPNW.com</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Sun, 01 Nov 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://vpnw.com/tags/signatures/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>VPN Works 0.10.0 Signs Every Ledger Checkpoint With a Key No Plugin Can Read</title>
      <link>https://vpnw.com/vpn-works-0.10.0-signs-every-ledger-checkpoint-with-a-key-no-plugin-can-read/</link>
      <pubDate>Sun, 01 Nov 2026 00:00:00 +0000</pubDate>
      <guid>https://vpnw.com/vpn-works-0.10.0-signs-every-ledger-checkpoint-with-a-key-no-plugin-can-read/</guid>
      <description>&lt;p&gt;&lt;strong&gt;VPN Works 0.10.0 signs the Ledger. The kernel holds a key, one per machine, and signs each checkpoint and the end of a run&amp;rsquo;s sealed record. Ledger never sees the key. Anyone with the public key can check a ledger, and one written again after a checkpoint fails right there.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Ledger has sealed each run&amp;rsquo;s events into a hash chain since 0.5.0. A chain shows any edit, as long as nobody computes it again. Someone who could rewrite the whole file, hashes and all, was caught only by copies kept elsewhere: the checkpoint copies in the trace, or the last hash Ledger prints at the end.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
