On Mon, Sep 24, 2007 at 12:35:54AM +0200, Joachim Schipper wrote:

quoted text
> On Sun, Sep 23, 2007 at 10:54:06PM +0100, Rui Miguel Silva Seabra wrote:

> > Remember: OpenBSD still doesn't have a digitally signed code distribution,

> > and in some places that means it can't enter! Stupid, I know, but not too

> > stupid for the "blame game" rules, which sort of ignore the "secure by

> > design" initiatives.

>

> Sure it does, just pull from CVS over SSH and compile your own. Only

> requires trusting one download, ever, and that can be verified by

> downloading from n servers from m distinct network locations, and

> verifying that the checksums match.

>

> I do get what you are hinting at, but it's not an insurmountable issue.

It depends on the rules. If they say it must be digitally signed... one may

be SOL :|
--

Wibble.

Today is Sweetmorn, the 47th day of Bureaucracy in the YOLD 3173

+ No matter how much you do, you never do enough -- unknown

+ Whatever you do will be insignificant,

| but it is very important that you do it -- Gandhi

+ So let's do it...?