GNU bug report logs - #17625
details of package signing mechanism

Previous Next

Full log

Message #105 received at 17625 <at> debbugs.gnu.org (full text, mbox):

From: Ted Zlatanov <tzz <at> lifelogs.com>
To: Daiki Ueno <ueno <at> gnu.org>
Cc: Stefan Monnier <monnier <at> iro.umontreal.ca>, 17625 <at> debbugs.gnu.org
Subject: Re: bug#17625: 24.4.50;
 All installed packages marked "unsigned", no archive listed
Date: Thu, 26 Jun 2014 09:53:24 -0400

On Thu, 26 Jun 2014 16:28:47 +0900 Daiki Ueno <ueno <at> gnu.org> wrote: 

DU> Stefan Monnier <monnier <at> iro.umontreal.ca> writes:

>> There are several issues in it:
>> 
>> 1- why have `package-desc-signed' (and the foo.signed files)?  I don't
>> think APT has such a feature and I'm wondering what would be
>> the interest.

DU> I remember it was exactly for displaying signed/unsigned status on the
DU> list, requested by Ted:
DU> https://lists.gnu.org/archive/html/emacs-devel/2013-10/msg00033.html
DU> I'm not sure if it is useful at this point.

I think you mean where I said:

TZ> Any file from an archive, not just a package tarball, should be signed
TZ> (especially the package index).

Ted

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.