Re: [Gnu-arch-users] oh the heck with it -- tla-1.2pre0

[Momchil Velikov]

>>>>> "Karl" == Karl Waclawek <address@hidden> writes:

>> >>>>> "Tom" == Tom Lord <address@hidden> writes:
>> 
Tom> * Signed Archives
Tom> ** Creating a Signed Archive
Tom> ** Signing Rules: ~/.arch-params/signing/$ARCHIVE
Tom> ** Signature Checking Rules: ~/.arch-params/signing/$ARCHIVE.check
Tom> ** Default Rules
>> 
>> Is it possible to create encrypted archives ? Say, having in
>> ~/.arch-params/signing/$ARCHIVE
>> 
>> gpg --sign --encrypt
>> 
>> and in ~/.arch-params/signing/$ARCHIVE.check
>> 
>> gpg --decrypt 
>> 

Karl> Would this not be somewhat orthogonal to arch?
Karl> Since arch uses the file system as data storage would this
Karl> not be better done on the file system level?

  Nope, because the archive is to be made available to developers, who
do not share the same filesystem.

Karl> Also, what would this achieve that you cannot do
Karl> with a secure access protocol?

  Depends. VPN (as Tom suggested) may be alright.  Giving shell access
(via ssh/sftp) may not be acceptible.

~velco