Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] Threat profile analysis for spackages not signed by authors

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Pieter Lenaerts <e-type AT cwazy.co.uk>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] Threat profile analysis for spackages not signed by authors
  • Date: Mon, 5 Sep 2005 14:04:12 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 05 Sep 2005 12:51:54 +0200
Ladislav Hagara <ladislav.hagara AT unob.cz> wrote:

> > Yep I like this idea. Why not always using a hash, and adding
> > vendor signing when it's available ?
>
>
> My kindred spirit. :-)
>
> Personally I would ban smgl's developers gpg signs. There are/will be
> only problems with them.
> I would like us to use only hashes (probably created by gpg
> --print-md). Of course "adding vendor signing when it's available" is
> great for our users.
>
> I would like to see:
> # cast xyz
> Checking xyz's developers gpg signing .... OK.
> Checking Source Mage hash ... OK
> ...


I would prefer this too


>
> BTW,
> What is the result of our discussion? What is the result of GPG
> signing poll?
>





- --
Pieter Lenaerts
maintainer of editors and wm's - Sourcemage GNU/linux
http://www.sourcemage.org

e-type AT cwazy.co.uk
MSN: pieter_b52 AT yahoo.com
jabber: e-type AT jabber.org
irc: irc.freenode.net #sourcemage
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDHDQ/5k8Xfc0XvhYRAradAJwKvSlpT1a8kHycWaauwoW+TTPuIQCghExR
2s2zwavXWF731WBri8rmfRk=
=CiUL
-----END PGP SIGNATURE-----



Archive powered by MHonArc 2.6.24.

Top of Page