Skip to Content.
Sympa Menu

sm-commit - Re: [SM-Commit] GIT changes to master grimoire by David Kowis (c72b87955457935554592ab0a35869099c83f750)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Jaka Kranjc <lynx AT mages.ath.cx>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: Re: [SM-Commit] GIT changes to master grimoire by David Kowis (c72b87955457935554592ab0a35869099c83f750)
  • Date: Mon, 21 Jan 2008 16:38:33 +0100

On Sunday 20 of January 2008 23:56:00 Ladislav Hagara wrote:
> BTW, we still can't detect similar changes if sources are signed only by
> their developers (vendor signed spell).
> I know we can add their signatures into spells but we don't do it.
> Is it a political will to add a second checking by our hashes or by our
> signatures to vendor signed spells?
Why? They signed the source, so they vouch for it. I also think it is more
likely that someone would break into some website/ftp to change the source
than someone additionally breaking a gpg key and resigning.

--
We cannot command nature except by obeying her. --Sir Francis Bacon
Have a sourcerous day! www.sourcemage.org

Attachment: signature.asc
Description: This is a digitally signed message part.




Archive powered by MHonArc 2.6.24.

Top of Page