Bugs for Sorcery are reported here

[bugzilla-daemon AT metalab.unc.edu]

http://bugs.sourcemage.org/show_bug.cgi?id=2145

           Summary: cast should handle MD5[0]="ignore"
           Product: Sorcery
           Version: Devel
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Cast
        AssignedTo: sm-sorcery-bugs AT lists.ibiblio.org
        ReportedBy: seth AT tautology.org


should be made to ignore md5s that say "ignore" for daily spells and print a
security note saying that due to the nature of nightly-updated or
constantly-updating spells, the regular MD5 checking step has been overridden 
by
the spell maintainer.  They should be made aware that the additional
confirmation of a spell-maintainer-checked MD5 value of the original
uncompressed source no longer applies and that there is a slightly higher
additional risk involved with ignoring MD5 checking regarding modified 
downloads.

I can work on a patch for this if nobody on the sorcery team has time to take 
it
up right now.

Seth



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.