Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] gnupg signatures on website available now for sorcery and grimoires. Plus draft text of gpg source validation for grimoires.

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Andrew <afrayedknot AT thefrayedknot.armory.com>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] gnupg signatures on website available now for sorcery and grimoires. Plus draft text of gpg source validation for grimoires.
  • Date: Thu, 23 Dec 2004 17:34:12 -0800

<snip>

Thanks for all the hard work Seth!

As a quick executive summary of what features this work entails (since
seth's email was very descriptive):

* grimoire tarballs are signed (done)
* sorcery tarballs are signed (done)
* a spell in the grimoire contains the public keys to verify these
signatures (done)

* scribe will verify the signature of grimoire tarballs (not done)
* sorcery update will verify the signature of sorcery tarballs (not done)

* spell sources will have their gpg signatures checked rather than their
md5s checked

source gpg checking will be phased in more slowly because theres more
work to do, its more complicated, and also because with the grimoire
signed (and verified) the md5s alone are "relatively" secure as they
are already under the blanket of the grimoire gpg signature

-Andrew

--
__________________________________________________________________________
|Andrew D. Stitt | astitt at sourcemage.org |
|irc: afrayedknot | afrayedknot at t.armory.com |
|aim: thefrayedknot or iteratorplusplus | acedit at armory.com |
|Sorcery Team Lead | ftp://t.armory.com/ |
--------------------------------------------------------------------------

Attachment: pgpwepL4BPKh2.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page