On Wed, 22 Aug 2007 13:53:40 -0400 David Zeuthen <davidz@xxxxxxxxxx> wrote: > Assume that Alice gets Fedora from Mallory's mirror. What prevents > Mallory from patching the rpm and yum programs that end up on Alice's > system to avoid honoring the keys that we, painfully, make her import? I honestly don't have an answer for this. They could. Should we then just throw out any and all verification utilities? That would make life easier. -- Jesse Keating Fedora -- All my bits are free, are yours?
Attachment:
signature.asc
Description: PGP signature
-- Fedora-desktop-list mailing list Fedora-desktop-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-desktop-list
