Date: Mon, 23 Jun 2003 09:31:39 +0200 From: William Fletcher <ultraviolet@epweb.co.za> To: chat@freebsd.org Subject: Re: Cryptographically enabled ports tree. Message-ID: <20030623073139.GG18653@tulip.epweb.co.za> In-Reply-To: <20030623072418.GF18653@tulip.epweb.co.za> References: <5.0.2.1.1.20030622022111.02c1cdf8@popserver.sfu.ca> <5.0.2.1.1.20030621193449.02c91ce8@popserver.sfu.ca> <5.0.2.1.1.20030621175853.02c92e00@popserver.sfu.ca> <20030621163835.GA18653@tulip.epweb.co.za> <5.0.2.1.1.20030621175853.02c92e00@popserver.sfu.ca> <5.0.2.1.1.20030621193449.02c91ce8@popserver.sfu.ca> <5.0.2.1.1.20030622022111.02c1cdf8@popserver.sfu.ca> <5.0.2.1.1.20030622044124.02cc0948@popserver.sfu.ca> <5.0.2.1.1.20030622084009.01c8d600@popserver.sfu.ca> <20030623072418.GF18653@tulip.epweb.co.za>
next in thread | previous in thread | raw e-mail | index | archive | help
--UK1lfQXsnwKrySH9 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Oh, and, the cvsup -a option, how trust-worthy is that?=20 On Mon, Jun 23, 2003 at 09:24:18AM +0200, William Fletcher wrote: > Hi, again.=20 >=20 > No use signing if cvsup is a mess. > We need cvsup-ssl, Then, all the big security guys need to do=20 > is provide a public key for the cvsup-mirrors, which then get > the public key for the big cvsup server, etc.=20 >=20 > That way, cvsup is secure, and we can trust it. >=20 > Then, we just get all the ports maintainers to provide public keys > and then we can download the distfiles from ftp\http and know > they're trusted.=20 >=20 > On the other hand, this means that we don't really need signed=20 > distfiles, the md5 checksum should do just fine, because we know > that we're getting our ports tree from a trusted source. >=20 > Thats just how I see it. Please, Please stop me if I'm wrong.=20 >=20 > Please correct me if I misunderstood all the e-mails in this thread too. = =20 >=20 > --=20 > William Fletcher (ultraviolet) Powered by http://www.FreeBSD.org/ > IT Administrator, EPWeb networks. irc at irc.epweb.co.za > http://www.epweb.co.za/ http://vision.za.net/irc/ > Tel: +27 (041) 395 6800 =20 > Fax: +27 (041) 395 6818=09 > Support: support@epweb.co.za >=20 > For countless days, We walked alone, Directionless and vunerable, Sitting= targets wearing smiles. > =20 --=20 William Fletcher (ultraviolet) Powered by http://www.FreeBSD.org/ IT Administrator, EPWeb networks. irc at irc.epweb.co.za http://www.epweb.co.za/ http://vision.za.net/irc/ Tel: +27 (041) 395 6800 Worship me! :) Fax: +27 (041) 395 6818=09 Support: support@epweb.co.za Super Admin... Da-ta-da!=20 --UK1lfQXsnwKrySH9 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE+9qzaju3fq0dMPxsRAsV4AJ9kBr0rAukKD2qPfiQSzrS6uacWjQCcCwnw bAMT9emXrV8PVMu9M1irAXc= =gGog -----END PGP SIGNATURE----- --UK1lfQXsnwKrySH9--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030623073139.GG18653>