[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: security vs. configure
|
From: |
Russ Allbery |
|
Subject: |
Re: security vs. configure |
|
Date: |
23 Apr 2001 01:01:02 -0700 |
|
User-agent: |
Gnus/5.0807 (Gnus v5.8.7) XEmacs/21.1 (Channel Islands) |
Michael Still <address@hidden> writes:
> Autoconf could run gnupg / pgp (if present) after generating the
> configure script and produce a checksum on the script. If this was a
> default action, then it would increase the chance of developers having
> at least some checksumming.
Better to sign the whole package, I'd think, and if you sign the whole
package, an additional signature (I think you mean signature and not
checksum) doesn't seem to add any value.
--
Russ Allbery (address@hidden) <http://www.eyrie.org/~eagle/>