Thanks for the useful info.

I am wondering why the publicly distributed boxes are not digitally signed.

I mean, nowadays, if you download a piece of software from a reputable 
source, the software is usually signed. Here we are talking about a 
full-blown virtual machine, yet it is not signed! What is the rationale 
behind it, considering this Vagrant thing is going to be used by more and 
more corporate users, perhaps even by banks and the Pentagon.

-- 
This mailing list is governed under the HashiCorp Community Guidelines - 
https://www.hashicorp.com/community-guidelines.html. Behavior in violation of 
those guidelines may result in your removal from this mailing list.

GitHub Issues: https://github.com/mitchellh/vagrant/issues
IRC: #vagrant on Freenode
--- 
You received this message because you are subscribed to the Google Groups 
"Vagrant" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/vagrant-up/e4958398-dc46-4806-a44a-ca0c3a543896%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to