Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-27 Thread R0b0t1
On Sat, Jan 27, 2018 at 8:27 AM, Michał Górny wrote: > W dniu czw, 25.01.2018 o godzinie 15∶55 -0600, użytkownik R0b0t1 > napisał: >> On Thu, Jan 25, 2018 at 3:45 PM, Michał Górny wrote: >> > W dniu czw, 25.01.2018 o godzinie 21∶37 +, użytkownik Robin H.

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-27 Thread Michał Górny
W dniu czw, 25.01.2018 o godzinie 15∶55 -0600, użytkownik R0b0t1 napisał: > On Thu, Jan 25, 2018 at 3:45 PM, Michał Górny wrote: > > W dniu czw, 25.01.2018 o godzinie 21∶37 +, użytkownik Robin H. > > Johnson napisał: > > > On Thu, Jan 25, 2018 at 01:35:17PM +0100, Michał

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Alon Bar-Lev
On 26 January 2018 at 00:21, Robin H. Johnson wrote: > On Thu, Jan 25, 2018 at 11:55:58PM +0200, Alon Bar-Lev wrote: >> I did not looked into the detailed implementation, however, please >> make sure integrity check handles the same cases we have applied to >> emerge-webrsync

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Robin H. Johnson
On Thu, Jan 25, 2018 at 11:55:58PM +0200, Alon Bar-Lev wrote: > I did not looked into the detailed implementation, however, please > make sure integrity check handles the same cases we have applied to > emerge-webrsync in the past, including: Gemato is the implementation of GLEP74/MetaManifest,

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Alon Bar-Lev
Hi, On 25 January 2018 at 14:35, Michał Górny wrote: > > Starting with sys-apps/portage-2.3.22, Portage enables cryptographic > verification of the Gentoo rsync repository distributed over rsync > by default. This aims to prevent malicious third parties from altering > the

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread R0b0t1
On Thu, Jan 25, 2018 at 3:45 PM, Michał Górny wrote: > W dniu czw, 25.01.2018 o godzinie 21∶37 +, użytkownik Robin H. > Johnson napisał: >> On Thu, Jan 25, 2018 at 01:35:17PM +0100, Michał Górny wrote: >> > Title: Portage rsync tree verification >> > Author: Michał Górny

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Michał Górny
W dniu czw, 25.01.2018 o godzinie 21∶37 +, użytkownik Robin H. Johnson napisał: > On Thu, Jan 25, 2018 at 01:35:17PM +0100, Michał Górny wrote: > > Title: Portage rsync tree verification > > Author: Michał Górny > > Posted: 2018-01-xx > > Revision: 1 > > News-Item-Format:

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Robin H. Johnson
On Thu, Jan 25, 2018 at 01:35:17PM +0100, Michał Górny wrote: > Title: Portage rsync tree verification > Author: Michał Górny > Posted: 2018-01-xx > Revision: 1 > News-Item-Format: 2.0 > Display-If-Installed: Starting with sys-apps/portage-2.3.22, Portage enables cryptographic

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Ulrich Mueller
> On Thu, 25 Jan 2018, Michał Górny wrote: > Here's the updated version: > --- > Starting with sys-apps/portage-2.3.22, Portage enables cryptographic > verification of the Gentoo rsync repository distributed over rsync > by default. Looks like there's one "rsync" too much in that sentence.

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Aaron W. Swenson
On 2018-01-25 13:35, Michał Górny wrote: > Display-If-Installed: =2.3.22 this same information? I know we don’t have expires, yet. How about making it signature.asc Description: Digital signature

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Michał Górny
Here's the updated version: --- Title: Portage rsync tree verification Author: Michał Górny Posted: 2018-01-xx Revision: 1 News-Item-Format: 2.0 Display-If-Installed: https://www.gentoo.org/downloads/signatures/ --- -- Best regards, Michał Górny