[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff
|
From: |
James Blackwell |
|
Subject: |
Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff |
|
Date: |
Fri, 26 Dec 2003 14:00:58 -0500 |
|
User-agent: |
Mutt/1.5.4i |
On Fri, Dec 26, 2003 at 07:50:43PM +0100, Johannes Berg wrote:
> On Fri, 2003-12-26 at 18:59, James Blackwell wrote:
> > While you're waiting, you can check your own archives with gpgcheck, which
> > you can get with 'tla grab http://sourcecontrol.net/grabs/tlacontrib'.
>
> Thanks, nice script. However, it has a small problem -- if a checksum
> file exists but is unsigned, it tells you that it has a bad signature.
>
I don't see that as a bug. Checksum files are worthless if they're not
signed. After all, if the patches have been modified by a nefarious
person, then the checksum file could be modified to match.
Thats rather the whole point of gpg signing.
--
James Blackwell Using I.T. to bring more 570-407-0488
Owner, Inframix business to your business http://inframix.com
GnuPG (ID 06357400) AAE4 8C76 58DA 5902 761D 247A 8A55 DA73 0635 7400
signature.asc
Description: Digital signature
Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff, Johannes Berg, 2003/12/26
Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff, Robert Collins, 2003/12/26
Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff, Andrew Suffield, 2003/12/26
Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff, Tom Lord, 2003/12/26
Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff, Andrew Suffield, 2003/12/27
Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff, James Blackwell, 2003/12/27