| |||||||||||||
McGee: The real story behind Arch Linux package signingMcGee: The real story behind Arch Linux package signingPosted Mar 26, 2011 11:29 UTC (Sat) by ovitters (subscriber, #27950)In reply to: McGee: The real story behind Arch Linux package signing by tzafrir Parent article: McGee: The real story behind Arch Linux package signing
In addition, GNOME and various other software do not sign their tarballs. The trust is already limited. You'll know it is packaged, but not if it comes from the developers (meaning: breakin at a mirror).
(Log in to post comments)
McGee: The real story behind Arch Linux package signing Posted Mar 26, 2011 13:17 UTC (Sat) by sahko (guest, #54088) [Link]
This is so much bigger than Arch.
It affects every distribution shipping GNOME. Thats every one, besides Slackware. Will we see a LWN article about it?
|
|||||||||||||