It doesn't seem that TAG-Security was part of the process of forming these recommendations. A lot of the recommendations listed seem to be without security value (e.g., enabling google analytics). Whe

+1 nb

+1 (non-binding)

+1 (non-binding)

+1 non-binding

+1 non-binding

+1 nb

I agree with Alena that single blind may make the most sense for Kubecon. Academic venues that use double blind usually do so (in part) to try to cut down on nepotism, etc. The acknowledged loss is th

+1 nonbinding

+1 (non-binding)

+1 non-binding

I'd like to give a big +1 to Solomon's nomination. Justin Cormack is a strong and vibrant part of many open source projects and would be a great addition for the TOC. Thanks, Justin

+1 (non-binding)

+1 (non-binding)

I own the repo (and just made that clearer in the authors / readme). Thanks for pointing that out! Justin

I didn't do a deep dive, but it looks like the "simple signing" design from Fedora would enable an attacker that has compromised the signing server to compromise user devices (even with HSMs, etc.). I