Open 456dev opened 3 years ago
Import processing -> finds all plugins in a directory, stores as a list of paths to import for each, call import with the extra hook. this extra hook verifys the developer signiture and the publisher/distrobution signiture. if either check fails, should either: warn the user, ask to continue if debug mode: -> warn in console, contiue w/o prompt (maybe a config option just for plugin development, and documented that it reduces saftey/security) if secure mode: reject plugin outright with error, require all plugins be signed.
@all-contributors add @the456gamer ideas
@Sh-wayz
I've put up a pull request to add @the456gamer! :tada:
Features
Reasons
https://stackoverflow.com/questions/21122426/pgp-gpg-signed-python-code