SCIENTIFIC-LINUX-USERS Archives

July 2009

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: new signing key issues
From:
Konstantin Olchanski <[log in to unmask]>
Reply To:
Konstantin Olchanski <[log in to unmask]>
Date:
Fri, 24 Jul 2009 18:46:59 -0700
Content-Type:
text/plain
Parts/Attachments:
text/plain (14 lines) 
On Thu, Jul 23, 2009 at 01:08:49PM -0500, Robert E. Blair wrote:
> ... set gpgcheck=0 as is the default.


Do not do this. Anybody who can hack an SL mirror (i.e. by redirecting
your DNS to a trojan mirror via DNS poisoning) will own all your machines.


-- 
Konstantin Olchanski
Data Acquisition Systems: The Bytes Must Flow!
Email: olchansk-at-triumf-dot-ca
Snail mail: 4004 Wesbrook Mall, TRIUMF, Vancouver, B.C., V6T 2A3, Canada

ATOM RSS1 RSS2