Public SourceMage Discussion List

["Sergey A. Lipnevich" <sergey AT optimaltec.com>]

On Wed, 2005-08-31 at 16:21 -0700, Seth Alan Woolley wrote:
> On Wed, Aug 31, 2005 at 07:08:07PM -0400, Sergey A. Lipnevich wrote:
> > On Wed, 2005-08-31 at 15:59 -0700, Andrew wrote:
> > > There is no keyserver, guru signing keys are not published to any
> > > keyserver unless the guru wants to, but theres no point to it, the keys
> > > are taken from the gurus.gpg keyring included in the grimoire.
> > 
> > Well then it's exactly the same as hash values :-), in that until the
> > grimoire (or keyring) is downloaded, nothing can be checked. If as you
> > suggest a method exists to alert the user that there's an updated
> > signature, hashes could be part of this method.
> 
> (var) UPDATED, (file) HISTORY, (file) SECURITY, (file) ChangeLog are 
> four such methods.

I'm not getting what you say here. But if you're listing objects whose
change can be detected, then I agree. DETAILS change would detect a new
hash, and a keyring change would detect a new key.