-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It seems that the main question about distributing the freenet jar is this: how 
do people who install these know 
they're not trojan versions?

Are the .jar files going to be gpg signed with the public key and fingerprint 
available on the website, or what 
other authenticating mechanism is planned?

Thanks.
:GeckoX


++ 14/11/02 14:51 -0800 - Ian Clarke:
>On Thu, Nov 14, 2002 at 05:39:43PM -0500, Michael Wiktowy wrote:
>> Ian, could you give an executive summary describing the current
>> implementation of the distribution servlet and how it is superior to
>> or different than just having a SSK containing the latest freenet build?
>
>The idea is to allow people to conveniently give copies of Freenet to 
>their friends by giving them a URL to visit, which will point to a page 
>on their Freenet node from which they can download and install a copy of 
>Freenet.
>
>This will provide a decentralized way to distribute Freenet, in addition 
>to the current centralized (and therefore vulnerable) mechanism - namely 
>downloading the code from our website.
>
>Ian.
>
>-- 
>Ian Clarke                ian@[freenetproject.org|locut.us|cematics.com]
>Latest Project                                 http://cematics.com/kanzi
>Personal Homepage                                      http://locut.us/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE91Qe4SMrcfZpjDKERAiP4AKCfbTJRjXaLm3qk9vnPC62MYU0hMQCeMdcV
5WrUb8TE5M4xEAEyGIu09Lk=
=N05z
-----END PGP SIGNATURE-----

_______________________________________________
devl mailing list
devl at freenetproject.org
http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to