From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-user+bounces-168455-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 0576C1384B4
	for <garchives@archives.gentoo.org>; Mon, 16 Nov 2015 17:21:30 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id E2E0E21C00F;
	Mon, 16 Nov 2015 17:21:20 +0000 (UTC)
Received: from plane.gmane.org (plane.gmane.org [80.91.229.3])
	(using TLSv1 with cipher AES256-SHA (256/256 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id DF029E080D
	for <gentoo-user@lists.gentoo.org>; Mon, 16 Nov 2015 17:21:19 +0000 (UTC)
Received: from list by plane.gmane.org with local (Exim 4.69)
	(envelope-from <lnx-gentoo-user@m.gmane.org>)
	id 1ZyNSs-0003Ng-Ta
	for gentoo-user@lists.gentoo.org; Mon, 16 Nov 2015 18:21:15 +0100
Received: from pc123.math.cas.cz ([147.231.88.123])
        by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
        id 1AlnuQ-0007hv-00
        for <gentoo-user@lists.gentoo.org>; Mon, 16 Nov 2015 18:21:14 +0100
Received: from martin by pc123.math.cas.cz with local (Gmexim 0.1 (Debian))
        id 1AlnuQ-0007hv-00
        for <gentoo-user@lists.gentoo.org>; Mon, 16 Nov 2015 18:21:14 +0100
X-Injected-Via-Gmane: http://gmane.org/
To: gentoo-user@lists.gentoo.org
From: Martin Vaeth <martin@mvath.de>
Subject: [gentoo-user] Re: All sorts of digest verification failures
Date: Mon, 16 Nov 2015 17:21:07 +0000 (UTC)
Message-ID: <n2d3a3$sbg$1@ger.gmane.org>
References: <n22dge$mnp$1@ger.gmane.org>
 <20151112171903.68e1b944@hal9000.localdomain> <n22fi3$s0n$1@ger.gmane.org>
 <5644C238.6040008@gmail.com> <20151115095928.GA1766@acm.fritz.box>
 <n2a6fa$eh8$1@ger.gmane.org> <20151115171735.4fd31dc3@digimed.co.uk>
 <n2al1m$7kk$1@ger.gmane.org> <5648E8C3.5090509@gmail.com>
 <1673.1447619387@ccs.covici.com> <20151115210235.GA8427@anonymous>
 <n2bu1j$sug$1@ger.gmane.org> <28052.1447659180@ccs.covici.com>
X-Complaints-To: usenet@ger.gmane.org
X-Gmane-NNTP-Posting-Host: pc123.math.cas.cz
User-Agent: slrn/1.0.1 (Linux)
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
X-Archives-Salt: e183dfc1-31bb-4230-ad8e-675cca75dcdd
X-Archives-Hash: bfb4dea7a25be59ca5c14ecbd1ada301

covici@ccs.covici.com <covici@ccs.covici.com> wrote:
>
> I have thinmanifests=true as specified in some news item or post, I
> think this was a mandatory change some time ago using rsync.

If you really use rsync/webrsync and not git, this is unlikely:
The file containing this line (metadata/layout.conf) should be
overridden at every rsync (unless you took special measures,
but this was certainly never recommended).

> They figured the ebuilds sync anyway so no reason for the
> manifests to have them.

It is not about syncing but about security (checksums with
signatures should safe you from MITM and even compromised
servers). Thin-manifests was only meant for git, because git
already contains checksums ('though only less secure sha1,
but that's a different story), so it was decided that no
duplicate checksums are needed for git.
For *rsync* the situation is different.