Re: RFC: gpg signed web pages
Op ma, 17-01-2005 te 09:43 -0500, schreef David Mandelberg:
> What do you (the list) think about signing all the web pages by putting detached
> armored signatures in files something like <page-filename>.asc and then having a
> header that specifies the location (e.g. X-OpenPGP-Signature:
> http://www.debian.org/index.en.html.asc)?
>
> That would help decrease the chance of somebody breaking into one of the servers
> (most importantly security.debian.org) and defacing the web pages.
No it wouldn't; at least not if either the server or a client would
check the signature before displaying it, which is unlikely to ever
happen.
--
EARTH
smog | bricks
AIR -- mud -- FIRE
soda water | tequila
WATER
-- with thanks to fortune
Reply to: