Skip to Content.
Sympa Menu

sm-discuss - [SM-Discuss] Compromise on signatures

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: "Sergey A. Lipnevich" <sergey AT optimaltec.com>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: [SM-Discuss] Compromise on signatures
  • Date: Mon, 29 Aug 2005 19:22:43 -0400

Hi All,

I can think of the following compromise that would hopefully satisfy all
sides.

1. Sorcery keeps support for hashes and signatures, both optional, but with
possibility to be restricted by users of individual systems. Here's one for
the
choice.

2. When this option becomes available, we move to digitally sign every
repository commit. In effect, this will also sign a hash that is stored in
DETAILS. Should a tarball or both tarball and hash value become compromised,
our repository will help detect that. For added protection, we can also
include
the size of tarball into DETAILS, effectively signing it as well.

This way, we will do exactly what is claimed on that Web page: sign package
receipt without signing the contents.

How does appeal to everyone?

Sergey.




Archive powered by MHonArc 2.6.24.

Top of Page