Gentoo Archives: gentoo-user

From: Rich Freeman <rich0@g.o>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Re: All sorts of digest verification failures
Date: Mon, 16 Nov 2015 22:33:07
Message-Id: CAGfcS_nh_qvomf6H-WCff2OioX0q-Spemvhqjzg2pWj0LuOSfQ@mail.gmail.com
In Reply to: Re: [gentoo-user] Re: All sorts of digest verification failures by Marc Joliet
1 On Mon, Nov 16, 2015 at 4:49 PM, Marc Joliet <marcec@×××.de> wrote:
2 >
3 > Don't forget that in Gentoo all commits are also GPG signed.
4 >
5
6 Sure, but to be fair those signatures are only bound to the content of
7 the commit by an sha1 hash.
8
9 --
10 Rich

Replies

Subject Author
Re: [gentoo-user] Re: All sorts of digest verification failures Marc Joliet <marcec@×××.de>