Re: Microsoft-IIS/6.0 serves up Debian... WTF!
On Sun, Jun 8, 2008 at 12:30 PM, Bernd Eckenfels <ecki@lina.inka.de> wrote:
> In article <[🔎] 7ff145960806072341q1f30e8fcmc680a2f134f9eb1@mail.gmail.com> you wrote:
>> It's mirror's like that, that make me paranoid about Debian Security.
>
> Why is that? IIS is the second most used web server on the market. And since
> mirrors are not a trusted part of software distribution anyway, I dont see
> an issue here.
Here's my issue, please correct me if I am wrong. .debs and sigs both
exist on the same server. If the Windows box/network is compromised,
then the sigs and debs can be modified and who would know?
-Jim P.
Reply to: