sm-discuss AT lists.ibiblio.org
Subject: Public SourceMage Discussion List
List archive
Re: [SM-Discuss] gnupg signatures on website available now for sorcery and grimoires. Plus draft text of gpg source validation for grimoires.
- From: Andrew <afrayedknot AT thefrayedknot.armory.com>
- To: sm-discuss AT lists.ibiblio.org
- Subject: Re: [SM-Discuss] gnupg signatures on website available now for sorcery and grimoires. Plus draft text of gpg source validation for grimoires.
- Date: Thu, 23 Dec 2004 17:34:12 -0800
<snip>
Thanks for all the hard work Seth!
As a quick executive summary of what features this work entails (since
seth's email was very descriptive):
* grimoire tarballs are signed (done)
* sorcery tarballs are signed (done)
* a spell in the grimoire contains the public keys to verify these
signatures (done)
* scribe will verify the signature of grimoire tarballs (not done)
* sorcery update will verify the signature of sorcery tarballs (not done)
* spell sources will have their gpg signatures checked rather than their
md5s checked
source gpg checking will be phased in more slowly because theres more
work to do, its more complicated, and also because with the grimoire
signed (and verified) the md5s alone are "relatively" secure as they
are already under the blanket of the grimoire gpg signature
-Andrew
--
__________________________________________________________________________
|Andrew D. Stitt | astitt at sourcemage.org |
|irc: afrayedknot | afrayedknot at t.armory.com |
|aim: thefrayedknot or iteratorplusplus | acedit at armory.com |
|Sorcery Team Lead | ftp://t.armory.com/ |
--------------------------------------------------------------------------
Attachment:
pgpwepL4BPKh2.pgp
Description: PGP signature
-
[SM-Discuss] gnupg signatures on website available now for sorcery and grimoires. Plus draft text of gpg source validation for grimoires.,
Seth Alan Woolley, 12/23/2004
- Re: [SM-Discuss] gnupg signatures on website available now for sorcery and grimoires. Plus draft text of gpg source validation for grimoires., Mads Laursen, 12/23/2004
-
Re: [SM-Discuss] gnupg signatures on website available now for sorcery and grimoires. Plus draft text of gpg source validation for grimoires.,
Andrew, 12/23/2004
- [SM-Discuss] dc_gui cast test, Mathieu L., 12/27/2004
- Re: [SM-Discuss] gnupg signatures on website available now for sorcery and grimoires. Plus draft text of gpg source validation for grimoires., Mathieu L., 12/24/2004
Archive powered by MHonArc 2.6.24.