From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 2558 invoked from network); 11 Nov 2004 20:11:52 +0000 Received: from smtp.gentoo.org (156.56.111.197) by lists.gentoo.org with AES256-SHA encrypted SMTP; 11 Nov 2004 20:11:52 +0000 Received: from lists.gentoo.org ([156.56.111.196] helo=parrot.gentoo.org) by smtp.gentoo.org with esmtp (Exim 4.41) id 1CSLIN-0003G0-Ro for arch-gentoo-security@lists.gentoo.org; Thu, 11 Nov 2004 20:11:51 +0000 Received: (qmail 20781 invoked by uid 89); 11 Nov 2004 20:11:31 +0000 Mailing-List: contact gentoo-security-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-security@gentoo.org Received: (qmail 8998 invoked from network); 11 Nov 2004 20:11:30 +0000 Message-ID: <010401c4c82a$98d39040$2203010a@gcombe> From: "Glen Combe" To: References: <200411111355.05847.tradergt@smelser.org> Date: Thu, 11 Nov 2004 13:11:15 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 Subject: Re: [gentoo-security] Maybe a new approach? X-Archives-Salt: f2c64e15-46c9-47b7-9119-f0825f18d43b X-Archives-Hash: 24c656a99d4eae5dea5ab787e30dd00e the key word being discussion. So we have peters fix. are there any others? Kurt can you clarify this for me or give me more detail... on what you mean what you say below? What is the more robust solution? I dont recall reading it here? "The solution that Peter is requesting (generating hashes of files not already hashed and then signing all Manifests/hashes) is considerably more risky and is not something I will implement since we have a more robust, better solution in the works already." Thanks ----- Original Message ----- From: "Jeff Smelser" To: Sent: Thursday, November 11, 2004 12:55 PM Subject: Re: [gentoo-security] Maybe a new approach? -- gentoo-security@gentoo.org mailing list