New issue 2939: Buildbot is not available via TLS
https://bitbucket.org/pypy/pypy/issues/2939/buildbot-is-not-available-via-tls

KOLANICH:

Binaries built with a buildbot are not authenticated, so an adversary can 
inject malware into them. And users have to use them since the releases are 
very rare and there are no packages for popular distros.

1. Setup TLS securely.
2. Generate an OpenPGP keypair for buildbot.
3. Setup signing.


_______________________________________________
pypy-issue mailing list
pypy-issue@python.org
https://mail.python.org/mailman/listinfo/pypy-issue

Reply via email to