Skip to Content.
Sympa Menu

sm-security - Re: [SM-Security] openPGP security by signing

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: "Sergey A. Lipnevich" <sergey AT optimaltec.com>
  • To: Seth Woolley <seth AT tautology.org>
  • Cc: sm-security AT lists.ibiblio.org
  • Subject: Re: [SM-Security] openPGP security by signing
  • Date: Wed, 14 May 2003 23:01:11 -0400


Seth Woolley wrote:

BTW, I was never going to remove md5s, just add on gpg ability:

SOURCE=original.tar.gz
SOURCE2=original.tar.gz.sign
MD5[0]=gpg
MD5[1]=3456 4534 3453 3453 3454 3543 3453 3453

this is easy to implement. like I did in the linux spell, you overload
unpack() with more arguments, passing SOURCE MD5[0] SOURCE2 MD5[1] instead
of just SOURCE MD5[0]


Two questions. 1. How is this going to work for spells like OpenOffice with 20 SOURCEs? 2. If and how is this going to be different for packages that provide gpg signatures (GnuPG, Apache), and those that don't (absolute majority of them)?
Thanks!

Sergey.





Archive powered by MHonArc 2.6.24.

Top of Page