sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Re: [SM-Discuss] STRONGER POLICY for gpg signatures to replace MD5[*] and ALSO new SOURCE_HASH support

From: Seth Alan Woolley <seth AT positivism.org>
To: "Sergey A. Lipnevich" <sergey AT optimaltec.com>
Cc: sm-discuss AT lists.ibiblio.org
Subject: Re: [SM-Discuss] STRONGER POLICY for gpg signatures to replace MD5[*] and ALSO new SOURCE_HASH support
Date: Wed, 31 Aug 2005 17:23:29 -0700

On Wed, Aug 31, 2005 at 07:36:24PM -0400, Sergey A. Lipnevich wrote:
> Seth said both hashes and signatures have nothing to do with security.
> That's why I'm saying you're misled: you think we're arguing about
> better security. Nope.

Nothing to do with code auditing security, everything to do with
transport (and storage, the null transport case) security.

I wish you wouldn't repeat that mischaracterization.

Seth

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Quality Assurance Team Leader & Security Team: Source Mage GNU/linux
Linux so advanced, it may as well be magic http://www.sourcemage.org
Secretary Pacific Green Party of Oregon http://www.pacificgreens.org
Key id FDCEE733 = 5302 B414 64C4 6112 3454 E082 99F0 69DC FDCE E733

Attachment: pgp2Q8AHULU8Y.pgp
Description: PGP signature

Re: [SM-Discuss] STRONGER POLICY for gpg signatures to replace MD5[*] and ALSO new SOURCE_HASH support , (continued)