On Thu, Sep 06, 2012 at 18:05, Rowdy OpenBSD wrote: >> I already said there are no plans to start signing things. What more >> is there to discuss? > > Two things: > > 1) Why not? I'd like to know the reasons. I've read the FAQ, I've > checked the archives, and I've read all of the messages in this > thread. The best answer seems to be "because we can't be bothered". > But that's inconsistent with OpenBSD's proactive approach to security.
The only work that gets done is the work that people want to do. > The OpenBSD project has put more effort into less significant > security features than this. This is starting to sound like you telling the OpenBSD project what it should be doing. > 2) Given that there are no plans to start signing things, what's the > best way to update an OpenBSD system (including packages)? The modal Download a snapshot.