From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id A95BA1384B4 for ; Tue, 17 Nov 2015 07:10:46 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B001121C013; Tue, 17 Nov 2015 07:10:36 +0000 (UTC) Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 459B6E07DA for ; Tue, 17 Nov 2015 07:10:35 +0000 (UTC) Received: from thetick.localnet ([93.181.44.4]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0MSp1l-1Zr8Ga2Ljx-00Rtsy for ; Tue, 17 Nov 2015 08:10:33 +0100 From: Marc Joliet To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: All sorts of digest verification failures Date: Tue, 17 Nov 2015 08:09:40 +0100 Message-ID: <1506163.TA0Z8pjgq1@thetick> User-Agent: KMail/4.14.8 (Linux/4.1.12-gentoo; KDE/4.14.8; x86_64; ; ) In-Reply-To: References: <2115081.hdzugRMeM0@thetick> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1836142.vUyUHH72OU"; micalg="pgp-sha256"; protocol="application/pgp-signature" X-Provags-ID: V03:K0:9jjS/xNFQKlqk6IZOz3vREnCl3+nxy5A+4yIKWqQq5GbpmrWg6L 3M58FciPw4IXZeYg9XA5hIQXXTjIQcEF0XWAGU2+xPleBJmtd/1o5GNjOUORMTS1OJATFt8 emQZhJc09PfHWwewK36fGsZFx0t17eQzVTJHf3bLPO4h4WiNLV160jwmFFo3oNCwJxsOBt7 QbYDVtVlUUParTpESeurw== X-UI-Out-Filterresults: notjunk:1;V01:K0:2do/UB7nWsM=:yHFdSyDm4Uwxd8iPdO91SE NgCjkoK05t12P6Ha/FffovvL90O9hWCJmU64ZlEbQNzEq7ACgUOIyN4EFoi+iRoby9uj5T1PE IDPR3cCxHrkMSiVHsLO0xuPZ2l23rnCmDdR8Pk3CLyyeshU1XQxwv8vbomVQIcdo5v/0EIfWV jo+JmvarmLIMfO7Gh6VSdOvf1/w9rwtQjRy4zR4m1oRHyJjYp3JhlYinNuRsy1be+uufw5uJ8 teLnQCuvgxvIUR/h3/oPu1Ny/ttPMDvLmkL583mJHV3l0QppoQuFCWmmA9p4eVMMD2xW7I1T5 bF4UKeAwvPRw4avFPeO/cPyiOi92UfHYS7fp9ov7uDg4yJN5UM73tqmfV1fo/GaxMc2Nl2dYx 188BL2f4kDh5LFNbUxhupbjQBlTlNJE5iDnnLdSiVRd9OLhxsXeT4sjv9YSFt1AvtR+hw3vbS zwhvXRclkPT2gR+4eXaqxgnpmu/hJVKCAIZh3hbW3s8CV3jrVpY/f+AKYYiOxvN3/L3s2A5fv GdN7z2w4NsnEBXSGdTHaDJcB5L3bY7xmiFH7MfRc/TlxjPy78jLq62+tW7k12JaNJJxVlIjiJ knmtSx3bjFhajaeRRIJUqMn6mn9ZuCYfwG4m40e+lCKFSXEQw/rb+ex3o5gzISheP/wcIg8rO dP+OUErmJi8Lb3bR2JG9zDlWsLzWfgxUWzgNyoLXSCG8HkmhtVfkyV4CWO3h0fLZp2EhgLeIE 0mzdUtDq597ck1aEGCN0Zr72OvztdGzosGPYNxAbdNVMHZ+Qhml0LhZa/oQ= X-Archives-Salt: 750e3b60-544b-476a-a532-a22d7703f6a0 X-Archives-Hash: 69af2e3b249fcf40b195459ee71e2085 --nextPart1836142.vUyUHH72OU Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" On Monday 16 November 2015 17:32:56 Rich Freeman wrote: >On Mon, Nov 16, 2015 at 4:49 PM, Marc Joliet wrote: >> Don't forget that in Gentoo all commits are also GPG signed. > >Sure, but to be fair those signatures are only bound to the content of= >the commit by an sha1 hash. Ah! Thanks, I didn't know that. =2D-=20 Marc Joliet =2D- "People who think they know everything really annoy those of us who kno= w we don't" - Bjarne Stroustrup --nextPart1836142.vUyUHH72OU Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCAAGBQJWStLnAAoJEL/Q5oYsiHj0rEQQAL6SAKmj6NR00mfXzx/FX3qd ialJj1hplReFKIEJpmW/e6NyQccQ4WRlyG57ogDhumsAuG2FoMjSHlELEG8j869S QKwtOmQx7swzXCPn7Yctlc6tdUzNWmlvHQKQ++uILSRpjomsgSuQtahnraFDSE5z 6SkdGXuwNuLk3k6PaCklj6fcdAlfv/Iolb2IgfQ0Vj+OgVsa1zZbX9midmXZqgcl LPdKQ9o71q8F7odRRNya6OvRrJhEpLrc/85KiPH6FZAxAjt0w5dunDbPmnv0C6JA XB8zZDCAfMw9VnNTGWUXK8oPZfqjZP02d8s1836d3nI7B0HTa9/lJWxVrrR2P2RO Sk1CpEAKUvXJei3Y/QrdbzFuJ+tz2l3XVGjtJPMypMJE+fnRqvE9K9UvdSpZGPnY TbNzusZkPK3qWUcB5uLkbmDTotylbhtcZ+EyljZQBZeNh/e7dLIDcabXnXXi/hIE h5v/vpJQPhqvl/BY4ryzclFtLkCkyyAeqhuoOY9y1cZ844OSZIR8MNXI0Kq9mKdW jxM57wfEkeSxEyptTlxX6P2RdrbRSMwv7vAEQRTIOGuzs3IXQcaydQmzKAHAo9nf IrBKKFyI54Iygn59v8jc6PwKJ+eet0iF4aL2E49TCeADmE9THC3qTzgB9DYzeiUH XnUf9/djhQaqiJozReFV =qtNd -----END PGP SIGNATURE----- --nextPart1836142.vUyUHH72OU--