Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] STRONGER POLICY for gpg signatures to replace MD5[*] and ALSO new SOURCE_HASH support

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: "Sergey A. Lipnevich" <sergey AT optimaltec.com>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] STRONGER POLICY for gpg signatures to replace MD5[*] and ALSO new SOURCE_HASH support
  • Date: Mon, 29 Aug 2005 17:22:17 -0400

Quoting dave AT sourcemage.org:

I understand that you might have reservations using a personal
signature. Signing your name is serious business, and not to be done
lightly. However you are making a logical error in assuming the
signature itself has some inherent meaning other than repudiating your
agreement to the stated terms.

Although you will be providing your signature with the tarball, you are not
signing the tarball. You are signing this:

http://www.sourcemage.org/security-source_integrity_checking_standards


Thanks again, but no, I can't support this. Sorry.

Sergey.





Archive powered by MHonArc 2.6.24.

Top of Page