From owner-freebsd-arch Wed Mar 14 12:29:18 2001 Delivered-To: freebsd-arch@freebsd.org Received: from elvis.mu.org (elvis.mu.org [207.154.226.10]) by hub.freebsd.org (Postfix) with ESMTP id 0382737B718 for ; Wed, 14 Mar 2001 12:29:15 -0800 (PST) (envelope-from billf@elvis.mu.org) Received: by elvis.mu.org (Postfix, from userid 1098) id B607781D01; Wed, 14 Mar 2001 14:29:14 -0600 (CST) Date: Wed, 14 Mar 2001 14:29:14 -0600 From: Bill Fumerola To: freebsd-arch@FreeBSD.org Subject: Re: [PATCH] add a SITE MD5 command to ftpd Message-ID: <20010314142914.Q31752@elvis.mu.org> References: <20010313211544.B17733@ringworld.oblivion.bg> <20010313133909.A83966@dragon.nuxi.com> <20010314000351.N31752@elvis.mu.org> <20010314012238.B91957@dragon.nuxi.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010314012238.B91957@dragon.nuxi.com>; from TrimYourCc@NUXI.com on Wed, Mar 14, 2001 at 01:22:38AM -0800 X-Operating-System: FreeBSD 4.2-FEARSOME-20010209 i386 Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, Mar 14, 2001 at 01:22:38AM -0800, David O'Brien wrote: > > Sounds like a nice feature to me, btw. > > And here I thought you never trusted anything from a remote site... I would trust that if my md5 checksum of a file is the same as the checksum returned by this command that I have the same file that the ftp server has (or I'm no better, without it I would have hoped that anyways, now I just have a little more data). I would also trust that if my checksum is different at a later date, that the file has changed and I need to update my copy. I wouldn't use it in place of a list of known good md5s signed by a trustworthy key because that would be silly. -- Bill Fumerola - security yahoo / Yahoo! inc. - fumerola@yahoo-inc.com / billf@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message