[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug-gsrc] Re: signatures on release tarballs?

From: Olav Vitters
Subject: [bug-gsrc] Re: signatures on release tarballs?
Date: Tue, 30 Mar 2010 14:10:31 +0200
User-agent: Mutt/1.5.20 (2009-06-14)

On Tue, Mar 30, 2010 at 07:28:24AM -0400, Brian Gough wrote:
> At Mon, 29 Mar 2010 17:03:51 +0200,
> Olav Vitters wrote:
> > 
> > On Mon, Mar 29, 2010 at 10:19:26AM -0400, Brian Gough wrote:
> > > I have a question regarding the release tarballs on ftp.gnome.org.
> > > As far as I can tell, these are not gpg-signed.  Is that correct?
> > 
> > They aren't signed.
> Thanks for the clarification.  Do you have any plans to support
> signed releases in the future?

No. I do not see what security in practice it would add. It would only
allow comparing the security of the mirroring system between
master.gnome.org and our primary mirror, ftp.gnome.org
(=ftp.acc.umu.se). Short term I'd rather focus on master.gnome.org.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]