Bugs for Sorcery are reported here

[bugzilla-daemon AT bugs.sourcemage.org]

http://bugs.sourcemage.org/show_bug.cgi?id=9329





------- Additional Comments From acedit AT armory.com  2005-07-23 19:02 -------
Our old md5sum scheme also prevents man in the middle attacks so the opening
paragraphs are a little out of place. Its true that gpg does do what you say,
but we already have that from md5.

The benefit of gpg is that it abstracts the mechanisms by which files are
verified. We no longer depend on a single hashing algorithm (md5) for
verification. The gpg guys deal with keeping up with the latest/greatest
algorithms; we dont have to.

I dont think you need to explain man-in-the-middle attacks, just say its for
file verification, preventing mallicious or accidental tampering with the 
file.

Do describe how to make a gpg key pair for signing files. Include whatever
policy is going to be used by the grimoire team if there is one yet.


-- 
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.