On Thursday 06 December 2007 05:52:46 Hannah Schroeter wrote:

quoted text
> Hi!

>

> On Wed, Dec 05, 2007 at 06:46:15PM -0500, STeve Andre' wrote:

> >[...]

> >

> >You know, you're descending into a recursive loop of "if, if, if..." and

> >it never ends.  OF COURSE if someone breaks into the site they could

> >do things--once you've lost control of your site all bets are off.  I dare

> >say that someone breaking into a site might find all the appropriate

> >tools to re-sign things, too, and do the spoof that way.

>

> If I released code with cryptographic signatures, I'd not leave a secret

> key file, nor a passphrase on the servers with the master web/ftp

> site. I'd sign on a box you can't access from the master site (nor

> the mirrors). So, no, the attacker would *not* gain access to signing

> tools (ok, yes, the tools, perhaps, like gpg or openssl, but not the

> key material).

>

> >--STeve Andre'

>

> Kind regards,

>

> Hannah.

Heh--you're intelligent.  But I know of two places where everything was

stored on the one machine, and I think one of those sites still hasn't

gotten it through their heads that this isn't a good idea.
--STeve Andre'