[MacPorts] #53411: macports-base codesigning ?
MacPorts
noreply at macports.org
Sat Jan 28 02:05:49 UTC 2017
#53411: macports-base codesigning ?
--------------------------+-------------------
Reporter: juju4 | Owner:
Type: enhancement | Status: new
Priority: Normal | Milestone:
Component: base | Version: 2.4.0
Resolution: | Keywords:
Port: |
--------------------------+-------------------
Comment (by jmroot):
Just signing the output of compiling arbitrary unaudited source isn't
really much of an improvement to security. Plus you really need to use a
Developer ID to make Apple's stuff entirely happy.
That's not to say something of this kind might not be useful, but it needs
careful design to ensure it's actually improving security and not just
giving a false sense of it.
The installer pkg is already signed BTW; does using that to upgrade make
any difference for your tools?
--
Ticket URL: <https://trac.macports.org/ticket/53411#comment:3>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list