Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753766AbbESSI0 (ORCPT ); Tue, 19 May 2015 14:08:26 -0400 Received: from bombadil.infradead.org ([198.137.202.9]:44275 "EHLO bombadil.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751752AbbESSIX (ORCPT ); Tue, 19 May 2015 14:08:23 -0400 Message-ID: <1432058889.3277.73.camel@infradead.org> Subject: Re: Should we automatically generate a module signing key at all? From: David Woodhouse To: Andy Lutomirski Cc: Linus Torvalds , Andy Lutomirski , David Howells , Michal Marek , Abelardo Ricart III , Linux Kernel Mailing List , Sedat Dilek , keyrings@linux-nfs.org, Rusty Russell , LSM List , Borislav Petkov , Jiri Kosina Date: Tue, 19 May 2015 19:08:09 +0100 In-Reply-To: References: <31154.1431965087@warthog.procyon.org.uk> <555A88FB.7000809@kernel.org> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.12.11 (3.12.11-1.fc21) Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-SRS-Rewrite: SMTP reverse-path rewritten from by bombadil.infradead.org See http://www.infradead.org/rpr.html Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 740 Lines: 21 On Tue, 2015-05-19 at 10:58 -0700, Andy Lutomirski wrote: > > Throwing away the key is outright impossible in some contexts. > > https://wiki.debian.org/ReproducibleBuilds Are any of the benefits described at https://wiki.debian.org/ReproducibleBuilds/About *not* just as achievable with the method I suggested — where you throw away the key and just validate that your builds are identical *except* for the signatures... which you can reuse, since your builds were identical. -- dwmw2 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/