mirror of
https://github.com/bisq-network/bisq.git
synced 2024-11-19 18:03:12 +01:00
1c580da5ed
We still depend on this jar *indirectly* via bouncycastle:bcpg, which is used for PGP signature verification of Bisq Desktop updates. This gets us closer to prospect of removing Bounce Castle dependency entirely in the future. Rationale for this direction: * We are really only using Bouncy Castle for PGP sig verification * Java's builtin cryptography got vastly better since 2000 * We should prefer boring and proven cryptography anyway * Australian projects should be considered compromised, and Bouncy Castle is run by Australian non-profit organization * Bouncy Castle is a heavy dependency totaling 3.6MB |
||
---|---|---|
.. | ||
.tx | ||
src | ||
update_translations.sh |