Re: [RFC] General Resolution to deploy tag2upload
Hello,
On Thu 13 Jun 2024 at 03:11pm +02, Pierre-Elliott Bécue wrote:
> Sean Whitton <spwhitton@spwhitton.name> wrote on 13/06/2024 at 14:44:57+0200:
>
>> Hello,
>>
>> On Thu 13 Jun 2024 at 01:05pm +02, Ansgar 🙀 wrote:
>>
>>> The statement also reads like the implementation was reviewed by Russ
>>> which as far as I understand isn't the case either? Or do you only plan
>>> to deploy a version once such a review happened?
>>
>> We weren't planning for this to be done, no.
>
> I'm sorry but I have a problem here.
>
> You stated in your first mail that both rra and noodles audited your
> work, and here it seems that audited is potentially a bit more than what
> has been done.
>
> Could you elaborate explicitly on what you mean with "audited"?
That's fair, I'll disambiguate the wording of (2).
Russ and Jonathan thoroughly reviewed the design and its security
properties. They've looked at bits of the implementation but not in a
completely systematic way.
--
Sean Whitton
Reply to: