> In the future, we will be working to implement a system that allows vendors to sign their own releases and publish these signatures (and related metadata) to an append-only cryptographic ledger.
Without dismissing all crypto currencies this seems more immediately practically useful:-)