On 8/13/2006 10:14 PM, DAve wrote:
Daryl C. W. O'Shea wrote:
On 8/13/2006 4:49 PM, DAve wrote:
Chainsaws, couldn't live without 'em. I hope all you lost were trees.
For the most part. Still trying to figure out how I'm going to cut up
one of the trees that is 23 feet in diameter, which conveniently is also
a hardwood, though.
Two, the GPG key really only says the rules are valid from your
server, it doesn't guarantee the rules are valid SARE rules. Not sure
how to handle that, or if users/authors will even care. Possibly
authors would be willing to tar, gzip, and sign their rules if they
were provided an upload facility.
I suppose they could. It'd be a little more work for the channel users
though, having to import each key and include them in a trusted gpgkey
file. Additionally it would require documentation to be updated for
every new ruleset, saying what key it uses.
We were thinking of going another way with that. We didn't consider the
possibility of providing the author's key. Good point, we will make sure
we don't.
BTW... the primary use for the GPG signing is to prevent tampering by
mirroring systems that may or may not be controlled by someone we even
know, such as the Coral CDN mirroring system we were trying out with
updates.spamassassin.org for a while.
We might start using your channel until we get ours working the way we
want:^) Possibly instead of mirroring you, we could go ahead and offer
a full set of files providing two independent sources. Just for
availabilities sake.
If it turns out the channels are used quite a bit, I'll probably mirror
it on my servers in Houston, Atlanta and Toronto once I get some
mirroring code written.
Different channels containing the same content wouldn't really increase
availability since people would be using only one of the channels.
DAve
PS. If I could have any plugin for SA, it would be a Snopes plugin. Scan
my inbox, check the message against snopes and score accordingly. I
don't need another story sent to me by family about people bolting JATO
packs to their cars or David Bowie and Mick Jagger sleeping together.
Hmm... I'm pretty sure they wouldn't appreciate the load of thousands of
mail servers hammering their systems. It would be nice though.
Daryl
