Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Wed, 29 Jan 2003 13:27:49 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Wed, 29 Jan 2003 13:27:49 -0500 Received: from zcars04f.nortelnetworks.com ([47.129.242.57]:19646 "EHLO zcars04f.nortelnetworks.com") by vger.kernel.org with ESMTP id ; Wed, 29 Jan 2003 13:27:48 -0500 Message-ID: <3E381F47.8060200@nortelnetworks.com> Date: Wed, 29 Jan 2003 13:36:55 -0500 X-Sybari-Space: 00000000 00000000 00000000 From: Chris Friesen User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.8) Gecko/20020204 X-Accept-Language: en-us MIME-Version: 1.0 To: "H. Peter Anvin" Cc: Valdis.Kletnieks@vt.edu, John Bradford , linux-kernel@vger.kernel.org Subject: Re: kernel.org frontpage References: <200301290947.h0T9lKa9000750@darkstar.example.net> <3E37A46B.4080907@zytor.com> <200301291509.h0TF9S4K003537@turing-police.cc.vt.edu> <3E3819CB.2090409@zytor.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org H. Peter Anvin wrote: > Valdis.Kletnieks@vt.edu wrote: > >> On Wed, 29 Jan 2003 01:52:43 PST, "H. Peter Anvin" said: >> >>> No, it would add absolutely nothing (other than clutter.) All the >>> .sign files are good for is to check for rogue mirrors. >> >> Or a rogue *primary* site, as has already happened to OpenSSH and >> Sendmail. > > NO! > > THE SIGN FILES DO NOT VERIFY AGAINST A COMPROMISED KERNEL.ORG MASTER SITE. Perhaps for the truly paranoid the signatures should be posted to this newsgroup and digitally signed by someone trusted. Chris -- Chris Friesen | MailStop: 043/33/F10 Nortel Networks | work: (613) 765-0557 3500 Carling Avenue | fax: (613) 765-2986 Nepean, ON K2H 8E9 Canada | email: cfriesen@nortelnetworks.com - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/