Date: Wed, 14 Mar 2001 14:29:14 -0600 From: Bill Fumerola <billf@mu.org> To: freebsd-arch@FreeBSD.org Subject: Re: [PATCH] add a SITE MD5 command to ftpd Message-ID: <20010314142914.Q31752@elvis.mu.org> In-Reply-To: <20010314012238.B91957@dragon.nuxi.com>; from TrimYourCc@NUXI.com on Wed, Mar 14, 2001 at 01:22:38AM -0800 References: <20010313211544.B17733@ringworld.oblivion.bg> <20010313133909.A83966@dragon.nuxi.com> <20010314000351.N31752@elvis.mu.org> <20010314012238.B91957@dragon.nuxi.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Mar 14, 2001 at 01:22:38AM -0800, David O'Brien wrote:
> > Sounds like a nice feature to me, btw.
>
> And here I thought you never trusted anything from a remote site...
I would trust that if my md5 checksum of a file is the same as the
checksum returned by this command that I have the same file that
the ftp server has (or I'm no better, without it I would have hoped
that anyways, now I just have a little more data).
I would also trust that if my checksum is different at a later date,
that the file has changed and I need to update my copy.
I wouldn't use it in place of a list of known good md5s signed by
a trustworthy key because that would be silly.
--
Bill Fumerola - security yahoo / Yahoo! inc.
- fumerola@yahoo-inc.com / billf@FreeBSD.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010314142914.Q31752>