On Wed, 02 Aug 2006 10:45:23 +1000, Nigel Tao wrote: > This code > looked good at the time it was added to the master list, but in the > mean time, the domain registration for some.web.site expired and a > villian has picked it up, and now serves up evil spyware versions of > the extension to our poor user. Bad.
Is it really that hard to check a digital signature? I'd have thought there'd be APIs in Python/C/Mono that make this trivial by now. And that's all you have to do to protect against the "files are changed by evil people" case. thanks -mike _______________________________________________ desktop-devel-list mailing list desktop-devel-list@gnome.org http://mail.gnome.org/mailman/listinfo/desktop-devel-list