Mailinglist Archive: opensuse-project (66 mails)

< Previous Next >
RE: [opensuse-project] Site going down at release - solution
  • From: Gerald Pfeifer <gp@xxxxxxx>
  • Date: Mon, 8 Jan 2007 14:06:21 +0100 (CET)
  • Message-id: <Pine.LNX.4.64.0701081230230.12171@xxxxxxxxx>
On Tue, 19 Dec 2006, Carlos E. R. wrote:
> The "snag" is that checking both checksum and signature doubles checking
> time. I suppose that the user could select which one to use, same as rpm
> does, having both systems too, if I'm not mistaken.

A cryptographic signature should detect data corruption as well as a
checksum -- after all it needs to detect willful tampering, not just
technical corruption. So that should suffice, shouldn't it?

Gerald
---------------------------------------------------------------------
To unsubscribe, e-mail: opensuse-project+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-project+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups