[MacPorts] #53411: macports-base codesigning ?

MacPorts noreply at macports.org
Sat Jan 28 02:05:49 UTC 2017


#53411: macports-base codesigning ?
--------------------------+-------------------
  Reporter:  juju4        |      Owner:
      Type:  enhancement  |     Status:  new
  Priority:  Normal       |  Milestone:
 Component:  base         |    Version:  2.4.0
Resolution:               |   Keywords:
      Port:               |
--------------------------+-------------------

Comment (by jmroot):

 Just signing the output of compiling arbitrary unaudited source isn't
 really much of an improvement to security. Plus you really need to use a
 Developer ID to make Apple's stuff entirely happy.

 That's not to say something of this kind might not be useful, but it needs
 careful design to ensure it's actually improving security and not just
 giving a false sense of it.

 The installer pkg is already signed BTW; does using that to upgrade make
 any difference for your tools?

--
Ticket URL: <https://trac.macports.org/ticket/53411#comment:3>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list