[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Checking signatures on source tarballs
From: |
Alex Vong |
Subject: |
Re: Checking signatures on source tarballs |
Date: |
Sat, 10 Oct 2015 15:22:12 +0800 |
> What you suggest would be perfect but, if I understand it correctly,
> it’s far from reality. There’s not a single project I know of that
> publishes the list of public keys authorized to sign its tarballs. Even
> if they did, we’d need a way to authenticate that list.
>
I think <https://www.kernel.org/signature.html> has listed all their
public keys used to sign their releases. This seems to be quite a neat
way of doing things. But you're right that there is no easy way to
authenticate that list.
- Re: Checking signatures on source tarballs, (continued)
- Re: Checking signatures on source tarballs, Ludovic Courtès, 2015/10/08
- Re: Checking signatures on source tarballs, Ludovic Courtès, 2015/10/09
- Re: Checking signatures on source tarballs, Brandon Invergo, 2015/10/15
- Re: [bug-gsrc] Checking signatures on source tarballs, Brandon Invergo, 2015/10/12
- Re: [bug-gsrc] Checking signatures on source tarballs, Ludovic Courtès, 2015/10/12
- Re: [bug-gsrc] Checking signatures on source tarballs, Brandon Invergo, 2015/10/15
- Re: [bug-gsrc] Checking signatures on source tarballs, Ludovic Courtès, 2015/10/12
- Re: [bug-gsrc] Checking signatures on source tarballs, Brandon Invergo, 2015/10/12
- Re: [bug-gsrc] Checking signatures on source tarballs, Ludovic Courtès, 2015/10/15
- Re: Checking signatures on source tarballs, Ludovic Courtès, 2015/10/12
- Re: Checking signatures on source tarballs,
Alex Vong <=
- Re: Checking signatures on source tarballs, Mark H Weaver, 2015/10/10
- Re: Checking signatures on source tarballs, Ludovic Courtès, 2015/10/11
- Re: Checking signatures on source tarballs, Rastus Vernon, 2015/10/15
- Re: Checking signatures on source tarballs, Mark H Weaver, 2015/10/15
- Re: Checking signatures on source tarballs, Alex Kost, 2015/10/08
- Re: Checking signatures on source tarballs, Andreas Enge, 2015/10/08
[PATCH 1/4] emacs: Add 'guix-devel-with-definition'., Alex Kost, 2015/10/08