Is Know Your Developer a Supply Chain Solution?

The financial industry has a concept of &ldquo;know your customer&rdquo; to prevent financial fraud. The concept is that fraudsters do not want transactions linked back to their identity. There&rsquo;s a similar push happening in Open Source security, to verify the identities of contributors before allowing their commits. The suggestion is that this could prevent an xz style attack by requiring in…