Skip to Content.
Sympa Menu

sm-sorcery-bugs - [SM-Sorcery-Bugs] [Bug 9329] guide on gpg checking in spells

sm-sorcery-bugs AT lists.ibiblio.org

Subject: Bugs for Sorcery are reported here

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-sorcery-bugs AT lists.ibiblio.org
  • Subject: [SM-Sorcery-Bugs] [Bug 9329] guide on gpg checking in spells
  • Date: Sat, 23 Jul 2005 19:02:00 -0700 (PDT)

http://bugs.sourcemage.org/show_bug.cgi?id=9329





------- Additional Comments From acedit AT armory.com 2005-07-23 19:02 -------
Our old md5sum scheme also prevents man in the middle attacks so the opening
paragraphs are a little out of place. Its true that gpg does do what you say,
but we already have that from md5.

The benefit of gpg is that it abstracts the mechanisms by which files are
verified. We no longer depend on a single hashing algorithm (md5) for
verification. The gpg guys deal with keeping up with the latest/greatest
algorithms; we dont have to.

I dont think you need to explain man-in-the-middle attacks, just say its for
file verification, preventing mallicious or accidental tampering with the
file.

Do describe how to make a gpg key pair for signing files. Include whatever
policy is going to be used by the grimoire team if there is one yet.


--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.




Archive powered by MHonArc 2.6.24.

Top of Page