Trust, but Verify: home

Case 01/01. Signature ↔ signature

Подпись ↔ подпись

Art

Artist
Jan van Eyck
Work
The Arnolfini Portrait
Year
1434
Where
National Gallery, London

Above the mirror van Eyck wrote “Johannes de eyck fuit hic 1434” — “Jan van Eyck was here”. The mirror shows two more people, possibly witnesses.

Code

digital signature

Only the owner of a private key can create a digital signature; anyone with the public key can verify it. A certificate authority plays the witness.

Action

Before installing an app, check who signed it.

Перед установкой приложения посмотрите, кто его подписал.

The label in the room

The same hash is printed at the foot of the label. If they match, nobody changed the text.

Van Eyck signed his painting and left witnesses in the mirror. A digital signature is made with a private key and witnessed by a certificate authority. Check who signed an app before installing it.

Ван Эйк подписал картину и оставил в зеркале свидетелей. Электронную подпись ставит владелец ключа, а свидетелем служит удостоверяющий центр. Перед установкой приложения посмотрите, кто его подписал.

SHA-256 of the Russian label text 7592cc1dcabb891d010188e8e4cc44ac38aaf9f7614ec17f48787f46f9afeb84

In the room

Diptych panel: a reproduction and the inscription above the mirror, enlarged

Rights

Public domain

Public domain

Sources

  1. en.wikipedia.org