So many formats, So few packages

[Bayard Bell]

On 7 Apr 2011, at 20:14, Daniel J. Luke wrote:

> On Apr 7, 2011, at 3:12 PM, Bayard Bell wrote:
>> 
>> On 7 Apr 2011, at 19:43, Daniel J. Luke wrote:
>>> On Apr 7, 2011, at 2:31 PM, Bayard Bell wrote:
>>>> 
>>>> At the risk of being a broken record, this doesn't solve MITM, which is a substantial problem in the current architecture.
>>> 
>>> I presume you mean the current 'download and use archives' architecture?
>>> 
>>> You do realize that this is also not a solved problem with the current system (the portfiles aren't signed ...), right?
>> 
>> I sent an e-mail laying that out quite recently and have escalated it through appropriate channels, who accept that the problem also needs to be fixed for non-binary distribution.
> 
> you going to solve the halting problem too, while you're at it?

No, I'm quite content to confine myself for the time being to application of mature solutions to well-understood problems.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1515 bytes
Desc: not available
URL: <http://lists.macosforge.org/pipermail/macports-dev/attachments/20110407/5fe3fdd6/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 203 bytes
Desc: This is a digitally signed message part
URL: <http://lists.macosforge.org/pipermail/macports-dev/attachments/20110407/5fe3fdd6/attachment-0001.bin>