From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on finch.gentoo.org X-Spam-Level: X-Spam-Status: No, score=-0.1 required=5.0 tests=DMARC_NONE,MAILING_LIST_MULTI autolearn=unavailable autolearn_force=no version=4.0.0 Received: from blunt.packetknife.com (blunt.packetknife.com [216.27.137.236]) by chiba.3jane.net (Postfix) with ESMTP id CB7822005DCC for ; Sat, 16 Feb 2002 19:21:54 -0600 (CST) Received: from damascus.packetknife.com (damascus.packetknife.com [216.27.137.233]) by blunt.packetknife.com (8.10.2/8.10.2) with ESMTP id g1H1K9p23841 for ; Sat, 16 Feb 2002 20:20:09 -0500 From: Ali-Reza Anghaie To: gentoo-dev@gentoo.org Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-0asOqS6FHc0961JiCwDA" X-Mailer: Evolution/1.0.2 (1.0.2-0.7x) Date: 16 Feb 2002 20:20:09 -0500 Message-Id: <1013908809.1459.59.camel@damascus.packetknife.com> Mime-Version: 1.0 Subject: [gentoo-dev] RE: Portage package security model... Sender: gentoo-dev-admin@gentoo.org Errors-To: gentoo-dev-admin@gentoo.org X-BeenThere: gentoo-dev@gentoo.org X-Mailman-Version: 2.0.6 Precedence: bulk Reply-To: gentoo-dev@gentoo.org List-Help: List-Post: List-Subscribe: , List-Id: Gentoo Linux developer list List-Unsubscribe: , List-Archive: X-Archives-Salt: 2a83b4b2-5566-46e9-9d12-4e77d64d3076 X-Archives-Hash: 438cd9d8a8729387702937eedfb054cb --=-0asOqS6FHc0961JiCwDA Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Like I suspected there was already something similar but I hadn't found it before. So the files/{digests} is part of the equation. And from at least one rip in #gentoo it seems signing the packages seems silly to some... Anyhow, thanks... -Ali --=20 OpenPGP key 53F7FF5F -- I, the above, promise to use as many global variables, magic numbers, gotos, and longjumps as I can, in order to make my application code appear more magical. -- (My friend JB) --=-0asOqS6FHc0961JiCwDA Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iEYEABECAAYFAjxvBUkACgkQxYOXtlP3/18cMwCfaLo/XMPFQ43DTpmPsfWvDGuI bGIAoN6usbwDfc832nTHscDhGdmEjwdX =yhC4 -----END PGP SIGNATURE----- --=-0asOqS6FHc0961JiCwDA--