Public SourceMage Discussion List

[Seth Alan Woolley <seth AT positivism.org>]

On Tue, Aug 30, 2005 at 03:12:32PM -0400, Sergey A. Lipnevich wrote:
>
> At least try to answer one question: find me a major OSS project that has a
> policy disclaiming authenticity and non-repudiation of the code signed 
> by their
> GPG signatures, and claiming only integrity must be verified. You and 
> Jeremy and
> others keep ignoring the questions I ask and try to find nonexistent 
> gaps in my
> logic, and that's not how I like the discussions to be held.
> 
> If you have anything else to say, I'm listening. Playing games with 
> words is not
> the best use of my time as well as yours.

As I explain in the email I just sent, Sergey is confusing authenticity 
and non-repudiation of transportation with code-auditing and security 
guarantees.  Please look there for more details:

https://lists.ibiblio.org/sympa/arc/sm-discuss/2005-August/012143.html

-- 
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Quality Assurance Team Leader & Security Team: Source Mage GNU/linux
Linux so advanced, it may as well be magic http://www.sourcemage.org
Secretary Pacific Green Party of Oregon http://www.pacificgreens.org
Key id FDCEE733 = 5302 B414 64C4 6112 3454  E082 99F0 69DC FDCE E733

Attachment: pgpi5QXoHI9eg.pgp
Description: PGP signature