Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5341

Re: Is packages build without verifying the source package signatures?

From Holger Levsen <holger@layer-acht.org>
Newsgroups linux.debian.security
Subject Re: Is packages build without verifying the source package signatures?
Date 2017-12-03 14:00 +0100
Message-ID <uSC2d-7zO-5@gated-at.bofh.it> (permalink)
References (1 earlier) <uSuel-2vs-1@gated-at.bofh.it> <uSA0p-6hP-3@gated-at.bofh.it> <uSAD7-6MP-3@gated-at.bofh.it> <uSAWu-6TZ-7@gated-at.bofh.it> <uSBzb-7pb-9@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Sun, Dec 03, 2017 at 01:11:50PM +0100, Bastian Blank wrote:
> It would still only need to compromise one machine: The one from where
> the keys are handled and distributed.

I rest my case. I'd secure the front door even if the side door (atm
still) can be compromised easy.


-- 
cheers,
	Holger

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Is packages build without verifying the source package signatures? Davide Prina <davide.prina@gmail.com> - 2017-12-02 12:20 +0100
  Re: Is packages build without verifying the source package  signatures? "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2017-12-02 13:50 +0100
  Re: Is packages build without verifying the source package signatures? Paul Wise <pabs@debian.org> - 2017-12-03 05:40 +0100
    Re: Is packages build without verifying the source package  signatures? Holger Levsen <holger@layer-acht.org> - 2017-12-03 11:50 +0100
      Re: Is packages build without verifying the source package  signatures? Bastian Blank <waldi@debian.org> - 2017-12-03 12:30 +0100
        Re: Is packages build without verifying the source package  signatures? Holger Levsen <holger@layer-acht.org> - 2017-12-03 12:50 +0100
          Re: Is packages build without verifying the source package  signatures? Bastian Blank <waldi@debian.org> - 2017-12-03 13:30 +0100
            Re: Is packages build without verifying the source package  signatures? Holger Levsen <holger@layer-acht.org> - 2017-12-03 14:00 +0100
          Re: Is packages build without verifying the source package  signatures? Clément Hermann <nodens@nodens.org> - 2017-12-04 01:20 +0100
    Re: Is packages build without verifying the source package  signatures? Kurt Roeckx <kurt@roeckx.be> - 2017-12-03 23:20 +0100

csiph-web