Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] STRONGER POLICY for gpg signatures to replace MD5[*] and ALSO new SOURCE_HASH support

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Seth Alan Woolley <seth AT positivism.org>
  • To: SM-Discuss <sm-discuss AT lists.ibiblio.org>
  • Subject: Re: [SM-Discuss] STRONGER POLICY for gpg signatures to replace MD5[*] and ALSO new SOURCE_HASH support
  • Date: Tue, 30 Aug 2005 12:40:59 -0700

On Tue, Aug 30, 2005 at 03:12:32PM -0400, Sergey A. Lipnevich wrote:
>
> At least try to answer one question: find me a major OSS project that has a
> policy disclaiming authenticity and non-repudiation of the code signed
> by their
> GPG signatures, and claiming only integrity must be verified. You and
> Jeremy and
> others keep ignoring the questions I ask and try to find nonexistent
> gaps in my
> logic, and that's not how I like the discussions to be held.
>
> If you have anything else to say, I'm listening. Playing games with
> words is not
> the best use of my time as well as yours.

As I explain in the email I just sent, Sergey is confusing authenticity
and non-repudiation of transportation with code-auditing and security
guarantees. Please look there for more details:

https://lists.ibiblio.org/sympa/arc/sm-discuss/2005-August/012143.html

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Quality Assurance Team Leader & Security Team: Source Mage GNU/linux
Linux so advanced, it may as well be magic http://www.sourcemage.org
Secretary Pacific Green Party of Oregon http://www.pacificgreens.org
Key id FDCEE733 = 5302 B414 64C4 6112 3454 E082 99F0 69DC FDCE E733

Attachment: pgpi5QXoHI9eg.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page