Re: bsign-0.1.7, won't sign ssh and others
On Mon, Dec 14, 1998 at 12:59:03PM -0800, Oscar Levi wrote:
>
> Let me get this clear: by signing only dsc files the only guarantee we
> can make is that the package uploaded to master came from the claimed
> author. Hmm. Are you sure? When I create my packages, I sign twice.
> I thought this was once for the dsc and once for the deb.
Once for the .dsc once for the .changes
--
----- -- - -------- --------- ---- ------- ----- - - --- --------
Ben Collins <b.m.collins@larc.nasa.gov> Debian GNU/Linux
UnixGroup Admin - Jordan Systems Inc. bcollins@debian.org
------ -- ----- - - ------- ------- -- The Choice of the GNU Generation
Reply to: