Marco Gaiarin <[EMAIL PROTECTED]> writes:

> 3) [complex, strong] use a PKI infrastructure where alla communication
> (clearly, usefoul one) are 'signed' with public keys.

Why not just having packages signed by a certificate trusted by
clients ?

Client download packages, verify the signature and install if it's ok.

Setting up a local certificate authority, deploying it on clients and
sign packages is not so hard IMHO.

Regards.
-- 
Daniel Dehennin
RAIP de l'Orne

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
wpkg-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wpkg-users

Reply via email to