lkml.org 
[lkml]   [2015]   [May]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectRe: Should we automatically generate a module signing key at all?
From
On Mon, May 18, 2015 at 9:04 AM, David Howells <dhowells@redhat.com> wrote:
>
> Should we instead provide a script:
>
> ./scripts/generate-key
>
> That generates a key if run and make it so that the build fails if you turn on
> module signing and there's no key.

That would just be stupid.

I'm not ever applying a patch like that. That would absolutely destroy
the sane "git clean + rebuild" model.

Why the hell would you want to make the sane case that people actually
*use* be harder to use.

Nobody sane bothers with long-term keys. They are inconvenient and less secure.

Put the onus on making it inconvenient on those people who actually
have special keys, not on normal people.

Linus


\
 
 \ /
  Last update: 2015-05-18 18:41    [W:0.172 / U:0.380 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site