Re: future Redhat security-patches updating policy ?

[Benno Senoner]

> > 
> > The problem is that Microsoft can cryptographically sign their
> > packages whereas Redhat cannot (unless they use a NSA certified,
> > closed-source system to do it).
> > 
> > Digital signatures are essential for any live update system like
> > this.
> > 
> 
> Actually, RedHat can, and do, sign their packages.  They just can't
> distribute the software you need to verify the signatures; you have to
> download it yourself...
> 
>
sorry for my ignorance, but aren't PGP signatures included in every RPM ?
I think when you are installing the rpm the rpm verifies the signature.

I am missing something ?

Is GnuPG the solution of the US export-control problems ?

regards,
Benno.

-- 
To unsubscribe:
mail -s unsubscribe [EMAIL PROTECTED] < /dev/null