On Tue, 2015-05-19 at 10:58 -0700, Andy Lutomirski wrote: > > Throwing away the key is outright impossible in some contexts. > > https://wiki.debian.org/ReproducibleBuilds
Are any of the benefits described at https://wiki.debian.org/ReproducibleBuilds/About *not* just as achievable with the method I suggested — where you throw away the key and just validate that your builds are identical *except* for the signatures... which you can reuse, since your builds were identical. -- dwmw2 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
