From owner-freebsd-questions@FreeBSD.ORG Fri Dec 25 01:53:25 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A036F106568B for ; Fri, 25 Dec 2009 01:53:25 +0000 (UTC) (envelope-from jackqq@gmail.com) Received: from mail-pz0-f185.google.com (mail-pz0-f185.google.com [209.85.222.185]) by mx1.freebsd.org (Postfix) with ESMTP id 768BE8FC17 for ; Fri, 25 Dec 2009 01:53:25 +0000 (UTC) Received: by pzk15 with SMTP id 15so5813048pzk.3 for ; Thu, 24 Dec 2009 17:53:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :from:date:message-id:subject:to:cc:content-type :content-transfer-encoding; bh=hRgMKjox55Kp2yt6c1z7Tl+OGhFINhkGmbIDF6qxgBk=; b=rzOtYNnvfG1nfcL1S3AMug/lSrBv/kQr+oMEUIJXLQjcYzZkPxu9pQ7O/coOJAHMXc 2t6YLECkuehTZWCSYDQzGqWcWzO19PZprgTPq1h3/ZYiSMXTXcr2PqOgZlwhsTotj8gx P9EcSrSZ+ugvrDlwsSNW7QvWt6hAJJFnJjFT4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:content-transfer-encoding; b=l1OYub5hfHEJy6Fr00DMl9a3NS56J//eLFEuNR1dmaoPl89iLrgGFbRmaGA1XWWwjb 00RrzN/2TfMweib1BxumpRDkteJo5AiZyEGWZ6RHDKoPFKMAfWHefmIdyPxH/wcU2jwp HTEwnO9B8LaZa62Ewpo57YRmMA8MFeMN+puvI= MIME-Version: 1.0 Received: by 10.142.247.42 with SMTP id u42mr8075256wfh.160.1261706005138; Thu, 24 Dec 2009 17:53:25 -0800 (PST) In-Reply-To: <4B33C731.9030909@infracaninophile.co.uk> References: <53a565700912240020s7476721egca5d7801ffcd2bb7@mail.gmail.com> <4B33C731.9030909@infracaninophile.co.uk> From: QIU Quan Date: Fri, 25 Dec 2009 09:53:05 +0800 Message-ID: <53a565700912241753o1a874800l4995c4b50a2c2980@mail.gmail.com> To: Matthew Seaman Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-questions@freebsd.org Subject: Re: Are source updating mechanisms vulnerable to MITM attacks? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Dec 2009 01:53:25 -0000 On Fri, Dec 25, 2009 at 03:55, Matthew Seaman wrote: > > freebsd-update(8), freebsd-update.conf(5) =C2=A0You can use this just to = pull > down > the system sources I believe, but only for release branches, not for > -CURRENT > or -STABLE. > Yes! freebsd-update(8) verifies download signatures. It's a good idea to follow the release branch using freebsd-update, since all my concern is following the security updates. Thanks! :-) --=20 =E8=A3=98=E4=BD=BA (QIU Quan)