Gentoo Archives: gentoo-dev

From: Paul de Vrieze <pauldv@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Redux: 2004.1 will not include a secure portage.
Date: Mon, 29 Mar 2004 08:49:06
Message-Id: 200403291047.53892.pauldv@gentoo.org
In Reply to: Re: [gentoo-dev] Redux: 2004.1 will not include a secure portage. by "Sami Näätänen"
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sunday 28 March 2004 18:39, Sami Näätänen wrote:

> To do what? > > The master key will not be present there. > And if you don't provide those keys that are in the card the keys you > make with the trojaned machine can't be validated with the master > public key.
That would only work if the external device actually performs the singing. Not when the key itself is readable by the computer the device is inserted in. I don't know if it would be possible to acquire such a device allthough they probably exist. Paul - -- Paul de Vrieze Gentoo Developer Mail: pauldv@g.o Homepage: http://www.devrieze.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAZ+K5bKx5DBjWFdsRAsvmAJ4sxzDl7z05qvloegttB5Omm1FsFQCgsttT DMv+RqOgr9ZnMLxArOOxMaI= =JzOQ -----END PGP SIGNATURE----- -- gentoo-dev@g.o mailing list

Replies

Subject Author
Re: [gentoo-dev] Redux: 2004.1 will not include a secure portage. John Nilsson <john@×××××××.nu>