Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] Threat profile analysis for spackages not signed by authors

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Eric Sandall <eric AT sandall.us>
  • To: "Sergey A. Lipnevich" <sergey AT optimaltec.com>
  • Cc: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] Threat profile analysis for spackages not signed by authors
  • Date: Mon, 12 Sep 2005 10:41:25 -0700 (PDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 11 Sep 2005, Sergey A. Lipnevich wrote:
Quoting Ladislav Hagara <ladislav.hagara AT unob.cz>:

Short answer: We will continue to support hashsums as well as GPG.

How long? To next accidental irc meeting?

I would like to hear an answer to this as well. Both of these questions
actually. The reason why is this: if we had a poll to begin with, we all
wouldn't have to waste so much energy on this whole thing.

We'll support hashsums until they are uncontestedly known to have a
better replacement or they become unfeasable to support (which I don't
see how they could at this time).

We had the poll because it was becoming apparent that this
'misunderstanding' of how GPG can be used was more widespread than I
had thought. So, an informal poll, which technically was not required
in any way, was conducted by me to see how many developers felt as you
did, but were not speaking up on the ML when asked several times
(perhaps because they didn't read the full thread).

I don't see explaining how we'd like to use packages in our package
manager as a waste of energy, especially when people don't seem to
like what was trying to be done.

As for 'accidental IRC meetings', we have IRC as a means of
communication, just like the ML, forums, etc. People are allowed to
use any means to communicate they want and the teams have usually been
fairly good about bringing up possibly contentious ideas to sm-discuss
after it's been hashed out on their own time.

- -sandalle

- --
Eric Sandall | Source Mage GNU/Linux Developer
eric AT sandall.us | http://www.sourcemage.org/
http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/ #196285 | http://www.shock.wsu.edu/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDJb3HHXt9dKjv3WERAupnAJ9TPcTOkn1+HmfMH42OVw+K1zl9dwCfextD
OySdoAaZzKVmNBYm62l7wYY=
=QEkz
-----END PGP SIGNATURE-----




Archive powered by MHonArc 2.6.24.

Top of Page