Re: [gentoo-security] Re: Let's blow the whistle

[Paul de Vrieze]

On Monday 08 November 2004 17:14, Thierry Carrez wrote:
> Last, your simple solution means work for the infrastructure team (to
> change the rsync replication process, provide for CPU time to perform
> the digest etc... And the portage team (testing and releasing extra
> functionality controlled by a FEATURE most people won't activate
> because it slows down the emerge sync process). Rephrasing your
> proposal as :
>
> (1) infrastructure scripts to generate signed digest
> (2) portage patches including the FEATURE of glocal verification
> (3) hard data showing the performance hit server-side and client-side
>
> would certainly help us. It's not your job to do an implementation
> proposal ? That's the "Gentoo team" job ? Man, get real. Gentoo is a
> community distribution. The "Gentoo team" cannot do everything, it
> needs user support. And yes, even posting a small script helps.

You're even forgetting number (4), a single master key is extremely 
sensitive to compromise. The biggest risk (that of the master sync server 
being compromised) is not being addressed, and your proposal does not 
handle the reliable revocation of such a key. And don't forget that the 
master key must be passphraseless as signing needs to happen very often.

Paul

-- 
Paul de Vrieze
Gentoo Developer
Mail: pauldv@g.o
Homepage: http://www.devrieze.net