* [gentoo-portage-dev] proto-GLEPS for Tree-signing, take 2
@ 2008-07-12 8:42 99% Robin H. Johnson
0 siblings, 0 replies; 1+ results
From: Robin H. Johnson @ 2008-07-12 8:42 UTC (permalink / raw
To: gentoo-portage-dev
[-- Attachment #1: Type: text/plain, Size: 1156 bytes --]
So I'm not going to directly attach the GLEPs again this time, however
I am just going to link to them, and summarize the changes:
xx+1:
- Add mention of how to defeat the mirror replay attacks from Stork@UArizona.
- Clarify wording of the UNCOVERED=ALL-COVERED set math, and why it's
important (genone)
- Add a timestamp to the metamanifest.
- Mention that it can be implemented without the new Manifest2
filetypes.
xx+5:
- Update the exclusion lists.
- Exclusion list behavior during strict validation.
- Fix typos.
prototype/generate-metamanifest.py:
- Prototype of the MetaManifest generation.
- Doesn't sign yet, but does include the timestamp.
- Uses existing Manifest2 types.
- See header for existing runtime info - it's quite fast.
http://sources.gentoo.org/viewcvs.py/gentoo/users/robbat2/tree-signing-gleps/
I'd like to ask for any comments to be in to me by July 14th 23:59UTC.
After that I'd like to post the GLEPs to the gentoo-dev mailing list.
--
Robin Hugh Johnson
Gentoo Linux Developer & Infra Guy
E-Mail : robbat2@gentoo.org
GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85
[-- Attachment #2: Type: application/pgp-signature, Size: 329 bytes --]
^ permalink raw reply [relevance 99%]
Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2008-07-12 8:42 99% [gentoo-portage-dev] proto-GLEPS for Tree-signing, take 2 Robin H. Johnson
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox