Verified90% confidenceFactExact time
GPG signing is a digital signature mechanism based on public-key cryptography, used for integrity verification in software releases and capable of defending against supply chain attacks.
6
Sources
90%
Confidence
Long-term
Relevance
9/6/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedGPG 签名在开源供应链安全背景下（2020 年 SolarWinds 事件和 2024 年 XZ Utils 后门事件之后）成为验证代码来源可信度的重要手段76% similarUnverified数字签名基于公钥密码学，可确认身份认证、完整性和不可抵赖性，常见算法包括 RSA、ECDSA 和 EdDSA72% similarUnverifiedStripe Webhook的安全性通过Signing Secret保障，Stripe用密钥对每个请求签名，服务器验证签名后才处理事件68% similarUnverified@ai-sdk/vue@4.0.92 is verified through GitHub's verified signature, with a GPG key ID of B5690EEEBB952194.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/864674API
curl https://kongchang.com/api/v1/knowledge/claims/864674MCP
get_claim(id=864674)