From: Alon Bar-Lev <alonbl@gentoo.org>
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] News item review: SquashDelta syncing support
Date: Sat, 16 May 2015 23:48:01 +0300 [thread overview]
Message-ID: <CAOazyz2VwQY+jRvXtZwrPC4Ov14+ukQvNMhFYRNmQeQpuXGepg@mail.gmail.com> (raw)
In-Reply-To: <20150515165139.2cfc1341@pomiot.lan>
On 15 May 2015 at 17:51, Michał Górny <mgorny@gentoo.org> wrote:
> Please note that the current syncing code does not verify the OpenPGP
> signature to confirm the authenticity of fetched snapshots and deltas.
> This feature will be added as soon as gentoo-keys support in Portage is
> available.
These are great news!
We can retire the webrsync.
Why not sign it similar to the portage snapshot are signed for now?
The webrsync signature validation is quite simple.
Just a reminder: please note the rollback prevention mechanism in
webrsync, it is not enough to check signature, but also prevent older
snapshot to be used.
Regards,
Alon
next prev parent reply other threads:[~2015-05-16 20:48 UTC|newest]
Thread overview: 28+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-05-15 14:51 [gentoo-dev] News item review: SquashDelta syncing support Michał Górny
2015-05-15 15:23 ` Dirkjan Ochtman
2015-05-15 16:15 ` Diamond
2015-05-15 18:32 ` Ian Stakenvicius
2015-05-15 19:33 ` Rich Freeman
2015-05-15 19:38 ` Ian Stakenvicius
2015-05-18 5:48 ` [gentoo-dev] " Martin Vaeth
2015-05-18 6:10 ` Brian Dolbec
2015-05-19 6:36 ` Martin Vaeth
2015-05-16 21:59 ` [gentoo-dev] " Michał Górny
2015-05-16 14:59 ` Michael Orlitzky
2015-05-16 18:38 ` Alexis Ballier
2015-05-16 19:18 ` Pacho Ramos
2015-05-16 19:23 ` Michael Orlitzky
2015-05-16 20:34 ` Brian Dolbec
2015-05-16 22:01 ` Michał Górny
2015-05-17 0:38 ` Michael Orlitzky
2015-05-17 3:47 ` Michał Górny
2015-05-17 8:52 ` [gentoo-dev] " Duncan
2015-05-17 18:52 ` [gentoo-dev] " Dale
2015-05-17 19:41 ` Michael Orlitzky
2015-05-20 7:56 ` Marc Schiffbauer
2015-05-16 22:00 ` Michał Górny
2015-05-17 0:45 ` Michael Orlitzky
2015-05-17 8:41 ` [gentoo-dev] " Duncan
2015-05-17 13:51 ` [gentoo-dev] " Ciaran McCreesh
2015-05-16 20:48 ` Alon Bar-Lev [this message]
2015-05-16 22:06 ` Michał Górny
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=CAOazyz2VwQY+jRvXtZwrPC4Ov14+ukQvNMhFYRNmQeQpuXGepg@mail.gmail.com \
--to=alonbl@gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox