Re: future Redhat security-patches updating policy ?

[H. Peter Anvin]

Damien Miller wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Sat, 2 Oct 1999 [EMAIL PROTECTED] wrote:
> 
> > Mandrake currently has something similar to this. Its a very very
> > nice feature. It will poll mirrors close to you for updates, and you
> > can install them right from the list that pops up. It reminds me
> > a bit of WindowsUpdate, minus the rebooting :) Although I haven't
> > messed with Mandrake all that much so I can't vouch for all its
> > pros/cons.
> 
> The problem is that Microsoft can cryptographically sign their
> packages whereas Redhat cannot (unless they use a NSA certified,
> closed-source system to do it).
> 
> Digital signatures are essential for any live update system like
> this.
> 

Actually, RedHat can, and do, sign their packages.  They just can't
distribute the software you need to verify the signatures; you have to
download it yourself...

        -hpa

-- 
To unsubscribe:
mail -s unsubscribe [EMAIL PROTECTED] < /dev/null