On Fri, Apr 04, 2014 at 01:43:03PM -0700, Kees Cook wrote: > > FWIW, I'm fine with this configuration: > - signed by Canonical (no 2nd root of trust) > - on by default only in Ubuntu Kylin > - hosted on non-Canonical servers
Sorry to be late to this party, though I think Steve and Stephane both represented my views quite well. I'm good with the simple summary by kees above with the (obvious, I think) s/hosted/distributed/ change to the last line. Obviously, this infrastructure is hosted by Canonical, but should not be distributed by them, except for the single rsync-over-ssh point of sync to the user-facing distribution server(s) operated by the Kylin folks. ... Adam -- technical-board mailing list technical-board@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/technical-board
