Public SourceMage Discussion List

[Eric Sandall <eric AT sandall.us>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 30 Aug 2005, Sergey A. Lipnevich wrote:
> Eric,
>
> You're now trying to mislead everyone even further by calling a hash value a
> signature. It's the same tactics you guys are trying to use to redefine the
> purpose of signature to mean something else. "Correct wording" that you
> describe will not be read by anyone who ought to read it; even if it were, it
> would be contrary to what most people are used to.

I'm not misleading anyone, you're misunderstanding the utility of GPG.

> At least try to answer one question: find me a major OSS project that has a
> policy disclaiming authenticity and non-repudiation of the code signed
> by their
> GPG signatures, and claiming only integrity must be verified. You and
> Jeremy and
> others keep ignoring the questions I ask and try to find nonexistent
> gaps in my
> logic, and that's not how I like the discussions to be held.

See my other e-mail for a nice concise listing plus snippets (includes
Fedora and SaMBa projects, which I consider 'major OSS project's). :)

> If you have anything else to say, I'm listening. Playing games with
> words is not
> the best use of my time as well as yours.

No one here is playing games with words.

- -sandalle

- --
Eric Sandall                     |  Source Mage GNU/Linux Developer
eric AT sandall.us                  |  http://www.sourcemage.org/
http://eric.sandall.us/          |  SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/  #196285  |  http://www.shock.wsu.edu/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDFNZXHXt9dKjv3WERAoifAJ4twwkN+kt7HhLTybaH+XWW1DB01QCgmVEw
OGHZaRjHOhwv+UOhBVhJjbY=
=zrql
-----END PGP SIGNATURE-----