[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [PATCH v3 3/3] dak.conf: add packages that trigger byhand-code-sign



On Mon, 2016-12-12 at 19:30 +0100, Joerg Jaspert wrote:
> On 14506 March 1977, Ben Hutchings wrote:
> 
> > 1. Directory listing is disabled for the directory containing
> >    signature tarballs.
> 
> There is a load of mails and irc discussions mixing together, so one
> question here: Is that supposed to be on some (restricted!) host
> somewhere with a limited apache and stuff - or on a (main or security)
> mirror?
> 
> The first is acceptable, the latter is not, for hopefully obvious reasons.

I meant the latter.  Your reason for objecting is not obvious to me.  I
understand that this can't be done for the main archive and all its
mirrors, which is fine - this is only important for emabrgoed security
updates.

Ben.

-- 
Ben Hutchings
If at first you don't succeed, you're doing about average.

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: