Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] Threat profile analysis for spackages not signed by authors

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Seth Alan Woolley <seth AT positivism.org>
  • To: "Sergey A. Lipnevich" <sergey AT optimaltec.com>
  • Cc: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] Threat profile analysis for spackages not signed by authors
  • Date: Wed, 31 Aug 2005 11:07:18 -0700

On Wed, Aug 31, 2005 at 12:21:37PM -0400, Sergey A. Lipnevich wrote:
> The beauty of hashes is that they don't need any extra support in addition
> to
> what's in sorcery now.

They still do, hashsum isn't as portable as I would have liked, so I'm
going to add gpg -print-md and (new in 0.9.8) the higher hashes
supported in openssl as alternative pure hash calculators (sans
asymmetric encryption) if we go ahead with your SOURCE_HASH.

Seth

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Quality Assurance Team Leader & Security Team: Source Mage GNU/linux
Linux so advanced, it may as well be magic http://www.sourcemage.org
Secretary Pacific Green Party of Oregon http://www.pacificgreens.org
Key id FDCEE733 = 5302 B414 64C4 6112 3454 E082 99F0 69DC FDCE E733

Attachment: pgprynjjPUSBy.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page