29 May
2012
29 May
'12
11:38
On Tue, 29 May 2012 13:25:31 +0200
"Carlos E. R."
But the good news: only for factory, for released products we do redirect to mirrors.
Is this correct now, for the normal distro no metadata comes directly from openSUSE now, everything from the mirrors?
IMO, that is a security concern.
I *hope* the security never depends on the server but on cryptographically signing the files - and verifying the validity of the signature before using them. Dieter -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org