







Can You Trust Your Computer? - GNU Project - Free Software Foundation
Who should your computer take its orders from? Most people think their computers should obey them, not obey someone else. With a plan they call “trusted computing,” large media corporations (including the movie companies and record companies), together with computer companies such as Microsoft and Intel, are planning to make your computer obey them instead of you. (Microsoft's version of this scheme is called Palladium.) Proprietary programs have included malicious features before, but this plan would make it universal.

An Update on OpenTitan
Web of Trust Info
Shared repositories for #RebootingWebOfTrust Design Workshops - Web of Trust Info
Trust & Safety Library - Trust & Safety Professional Association
Welcome to the Trust & Safety Library! We use this space to collect articles, blog posts, journal articles, lectures, podcasts, and websites that trust and safety professionals may find useful in developing policies, supporting moderators, building systems to detect violations, and generally deepening their practice. We welcome your submissions and feedback. This project was initially

LinkedTrust — Deep Tech. Human Trust.
Verified trust systems, civic tech platforms, and AI-powered tools. Real projects, real impact.

Encryption + Trust & Safety reading list (updated 2026-05-20)
Joanna Rutkowska (@rootkovska) on X
Distrusts computers. Keeps embracing them anyway. Previously: Golem Foundation/Wildland, Qubes OS, hardware/virtualization/OS security research.

The dawn of trustworthy computing
When we currently use a smart phone or a laptop on a cell network or the Internet, the other end of these interactions typically run on othe...
FAQ — Jami documentation
This is a list of frequently asked questions (FAQ), including some technical questions.
FR#150 – On ICE, Verification, and Presence As Harm
Bluesky built a verification system designed to distribute trust, and then didn't use it when it mattered.

wt.social has moved to trustcafe.io
Building a Browser-Native Verification Stack for Tinfoil
Learn how we built a browser-based confidentiality and integrity verifier with implementations of browser-native Sigstore and TUF libraries.

Reflections on trusting trust
To what extent should one trust a statement that a program is free of Trojan horses? Perhaps it is more important to trust the people who wrote the software.

Formal Verification Reference - Aura
This document describes the formal verification infrastructure that provides mathematical guarantees for Aura protocols through Quint model checking, Lean theorem proving, and Telltale session type verification.
My thoughts on Bluesky verification as someone who was deeply involved in an analogous scheme (selecting trusted root CAs for browsers) at Mozilla many years ago. The analogy is not exact: not trusting a verifier just means no checkmark, while not trusting a root CA means nasty security warnings 1/