-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Matthew Sachs wrote:
<snip> This would let
> us validate submissions and automate the  maintenance of the bindist
> (and even provide a bindist for unstable.)
> 

While I like that very much, there is a trust/security issue here which
we have failed to address so far. We should sit down and think about it
again. (signed packages, etc :)

Thank you Matthew for all the hard work you put into this

- -d
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFCnU4dPMoaMn4kKR4RAwVFAJ9vbDZgf0j1aMBhjFnN859awEz2gQCgkaUK
Ga8QKhs+jzqnaZlrVYdtXp0=
=zUXO
-----END PGP SIGNATURE-----


-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
Fink-devel mailing list
Fink-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fink-devel

Reply via email to