From mboxrd@z Thu Jan 1 00:00:00 1970
Return-Path: <gentoo-security-return-1614-arch-gentoo-security=gentoo.org@lists.gentoo.org>
Received: (qmail 9914 invoked from network); 10 Nov 2004 07:22:57 +0000
Received: from smtp.gentoo.org (156.56.111.197)
by lists.gentoo.org with AES256-SHA encrypted SMTP; 10 Nov 2004 07:22:57 +0000
Received: from lists.gentoo.org ([156.56.111.196] helo=parrot.gentoo.org)
by smtp.gentoo.org with esmtp (Exim 4.41)
id 1CRmoj-0006PX-Nk
for arch-gentoo-security@lists.gentoo.org; Wed, 10 Nov 2004 07:22:57 +0000
Received: (qmail 11520 invoked by uid 89); 10 Nov 2004 07:22:36 +0000
Mailing-List: contact gentoo-security-help@gentoo.org; run by ezmlm
Precedence: bulk
List-Post: <mailto:gentoo-security@gentoo.org>
List-Help: <mailto:gentoo-security-help@gentoo.org>
List-Unsubscribe: <mailto:gentoo-security-unsubscribe@gentoo.org>
List-Subscribe: <mailto:gentoo-security-subscribe@gentoo.org>
List-Id: Gentoo Linux mail <gentoo-security.gentoo.org>
X-BeenThere: gentoo-security@gentoo.org
Received: (qmail 31076 invoked from network); 10 Nov 2004 07:22:36 +0000
Date: Wed, 10 Nov 2004 08:22:34 +0100
From: Marius Mauch <genone@gentoo.org>
To: gentoo-security@lists.gentoo.org
Message-ID: <20041110082234.1c8bc79d@sven.genone.homeip.net>
In-Reply-To: <4191BD87.6040100@awry.ws>
References: <20041110020620.F1ADE2B3DB@smtp.istop.com>
<20041109233509.A19723@netdirect.ca>
<41919EC1.5010809@awry.ws>
<200411101408.42011.jstubbs@work-at.co.jp>
<4191BD12.4000301@awry.ws>
<4191BD87.6040100@awry.ws>
Organization: Gentoo Linux
X-Mailer: Sylpheed-Claws 0.9.12b (GTK+ 1.2.10; x86_64-pc-linux-gnu)
X-Face: H@&[wkk?l:Zx:8i_5bViK&{Vz{c{~r),^&:v/r#+X5dmfA6qCl)~'Ul{"&06Q1[05.%v&c>je5R{=xLnx^=~lN~rO0xuR~~NY)<MB_iH0+TEA(imBf+vcJfeG1sjv=IfQCn8OB5IGuRjP8?8=;ptUrg\oGjgDx;=$ToLyG!Qz]g?"{zwH`>CX\"Nc4$9CBPwDl-.pYuVeGdir86L@\:j?7@%Ej2?Wi-Y0=1]T14ce0w79Bckk[*ti{;iA"{;I}&E~.msRBsBS)N!CS4Gd|_UR
Mime-Version: 1.0
Content-Type: multipart/signed; protocol="application/pgp-signature";
micalg="pgp-sha1";
boundary="Signature=_Wed__10_Nov_2004_08_22_34_+0100_luSGW3puSZ2VvnVu"
X-Provags-ID: kundenserver.de abuse@kundenserver.de auth:7e6c91d1b14dbccceb2f2166522fa0f6
Subject: Re: [gentoo-security] Re: Out of air
X-Archives-Salt: 064b26b1-6c62-4c91-b048-9ab42a74d2a5
X-Archives-Hash: 8ccb17a344dd603a6b8ca3d5a9c4220c
--Signature=_Wed__10_Nov_2004_08_22_34_+0100_luSGW3puSZ2VvnVu
Content-Type: text/plain; charset=US-ASCII
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
On Tue, 09 Nov 2004 23:04:39 -0800
Chris Haumesser <ch@awry.ws> wrote:
> > Then there is also the up to six
> >month transition period between this solution and the solution that
> >is currently being implemented.
> >
> If portage support for this temporary hack is not implemented, there
> is clearly no six month transition period. Just that one day, those of
> us who have been manually verifying the signature will no longer need
> to do so.
Well, verifying the signature only shows you that noone has modified the
file containing the hashes, you still have to verify that the hashes
match the actual files and I really doubt that you want to do that
manually for ~100000 files.
Marius
--
Public Key at http://www.genone.de/info/gpg-key.pub
In the beginning, there was nothing. And God said, 'Let there be
Light.' And there was still nothing, but you could see a bit better.
--Signature=_Wed__10_Nov_2004_08_22_34_+0100_luSGW3puSZ2VvnVu
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
iD8DBQFBkcG/WzrL1pM7SNcRAjWmAKCXgAcc7e+VWP66xd4K/Aa1bIoNFgCcD123
iEfyMtTOXTfftKRskxc0Egc=
=pKBQ
-----END PGP SIGNATURE-----
--Signature=_Wed__10_Nov_2004_08_22_34_+0100_luSGW3puSZ2VvnVu--