lkml.org 
[lkml]   [2003]   [Jan]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: kernel.org frontpage
    From
    Date
    On Wed, 29 Jan 2003 19:37:50 GMT, Russell King said:

    > I believe a script signs the files on ftp.kernel.org, which means the
    > private key is on the master machine, probably without a pass phrase.
    > That means that if the master server is compromised, its highly likely
    > that a rogue file will have a correct signature.

    OK.. I missed that part, and thought somebody was doing a check-and-balance
    before files went out.

    > The only way to be completely sure is for Linus to gpg-sign the patches
    > himself at source with a known gpg key using a secure pass phrase before

    Now there's a thought.. ;)

    [unhandled content-type:application/pgp-signature]
    \
     
     \ /
      Last update: 2005-03-22 13:32    [W:0.027 / U:89.504 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site