https://speakerdeck.com/kytta 2026-06-27 08:32:46 -0400 First presented at <a href="https://ep2026.europython.eu/">EuroPython 2026</a> in Kraków, Poland. In 2023, PyPI started supporting Trusted Publishers: A way to publish Python packages to PyPI without relying on insecure password and short-lived tokens. Three years later, this approach has become the default answer to package registries' security, as it found its way into NPM, crates.io, and RubyGems. But does it actually offer the benefits we hoped it would? Can you really trust the green checkmark, and if you can't, what's the point? In this talk, I want to look closely at what Trusted Publishers are, and what we might think they are; who they do and do not protect. We'll explore the potential centralization problem of relying on Big Tech, US-based CI providers, leaving little room for smaller players like Codeberg and Sourcehut, as well as self-hosted Git forges and CI engines. First presented at <a href="https://ep2026.europython.eu/">EuroPython 2026</a> in Kraków, Poland. In 2023, PyPI started supporting Trusted Publishers: A way to publish Python packages to PyPI without relying on insecure password and short-lived tokens. Three years later, this approach has become the default answer to package registries' security, as it found its way into NPM, crates.io, and RubyGems. But does it actually offer the benefits we hoped it would? Can you really trust the green checkmark, and if you can't, what's the point? In this talk, I want to look closely at what Trusted Publishers are, and what we might think they are; who they do and do not protect. We'll explore the potential centralization problem of relying on Big Tech, US-based CI providers, leaving little room for smaller players like Codeberg and Sourcehut, as well as self-hosted Git forges and CI engines. Wed, 15 Jul 2026 00:00:00 -0400 https://speakerdeck.com/kytta/should-you-trust-trusted-publishing https://speakerdeck.com/kytta/should-you-trust-trusted-publishing Lightning talk given at <a href="https://2025.pycon.ee/">PyCon Estonia 2025</a>. Lightning talk given at <a href="https://2025.pycon.ee/">PyCon Estonia 2025</a>. Thu, 02 Oct 2025 00:00:00 -0400 https://speakerdeck.com/kytta/start-contributing-to-openstreetmap-today https://speakerdeck.com/kytta/start-contributing-to-openstreetmap-today