Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Dec 2011 13:46:02 +0000
From:      Vincent Hoffman <vince@unsane.co.uk>
To:        freebsd-current@freebsd.org
Subject:   Re: Benchmark (Phoronix): FreeBSD 9.0-RC2 vs. Oracle Linux 6.1 Server
Message-ID:  <4EF0919A.3040003@unsane.co.uk>
In-Reply-To: <4EF065EB.5090601@digsys.bg>
References:  <4EE1EAFE.3070408@m5p.com> <CAJ-FndDniGH8QoT=kUxOQ%2BzdVhWF0Z0NKLU0PGS-Gt=BK6noWw@mail.gmail.com> <4EE2AE64.9060802@m5p.com> <4EE88343.2050302@m5p.com> <CAFHbX1%2B5PttyZuNnYot8emTn_AWkABdJCvnpo5rcRxVXj0ypJA@mail.gmail.com> <4EE933C6.4020209@zedat.fu-berlin.de> <CAPjTQNEJDE17TLH-mDrG_-_Qa9R5N3mSeXSYYWtqz_DFidzYQw@mail.gmail.com> <20111215024249.GA13557@icarus.home.lan> <4EE9A2A0.80607@zedat.fu-berlin.de> <CAJ-VmomWnAvsVPcK0mfFECvFw_FKcja1m3NE9ue=TOkF%2Bx14Xg@mail.gmail.com> <CANY-Wm8jbtr3tiwdGQMDx8SVZKEBspGwTV7Q0wziYWsV%2Bf3BSQ@mail.gmail.com> <6140271.20111219122721@serebryakov.spb.ru> <CANY-Wm9-JTN0gvjoRv4XFMDaweoPSoZ4erTUto3Z-s1LxqGzhg@mail.gmail.com> <CABTjkKmRQ-hc2kKpCCrj4AmChXA59ErXeTHnt0oJSTEBFi-apw@mail.gmail.com> <CAPJF9wmgMi6XJrtETmHcv%2BMHP22V4xKkixTqxQYaej6RyViPbQ@mail.gmail.com> <CAMVU60ZRfOG4fCiz30BnAURCLbRgA0bdWjhNkQZnYQkMqB14sA@mail.gmail.com> <BA94EF30-6058-41A4-8D2E-4F362CC69501@gmail.com> <4EF065EB.5090601@digsys.bg>

next in thread | previous in thread | raw e-mail | index | archive | help
On 20/12/2011 10:39, Daniel Kalchev wrote:
>
>
> On 20.12.11 11:42, Garrett Cooper wrote:
>> As long as I have reliable checksums that match the what the upstream
>> source says is the real thing, it doesn't practically matter where I
>> get my images from.
>
> Relying on checksums that are published on the same web site where you
> download the files from and given that most of these sites do not even
> use SSL.... so much about 'security'.
>
This does remind me of one issue that while a little off topic for this
thread....
If i wanted to get, for example the SHA265 checksums from a verified
source, how would i verify this currently? There doesnt seem to be an
SSL site for www.freebsd.org and its not too hard to redirect someone to
a fake website.
What would be a more reasonable list to request this on?

Vince


> Daniel
> _______________________________________________
> freebsd-current@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to
> "freebsd-current-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4EF0919A.3040003>