Kees Cook wrote: > Hi, > > On Thu, Oct 25, 2007 at 08:16:18AM +0200, Mohammed Adnène Trojette wrote: >> I am not sure I understand. Are you resigning over your own signature or >> your sponsoree's? > > This is when I'm signing over my sponsoree's. Many of their build > practices include signing packages (it is good practice for their > eventual self-uploading). This comes up most of all when I'm doing > sponsored security updates.
Do you trust their binaries? If so I hope you do check them thoroughly... Cheers Luk -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
