From owner-freebsd-doc Mon Jan 20 8:50:46 2003 Delivered-To: freebsd-doc@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7BFB037B401; Mon, 20 Jan 2003 08:50:44 -0800 (PST) Received: from sccrmhc01.attbi.com (sccrmhc01.attbi.com [204.127.202.61]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6E57443E4A; Mon, 20 Jan 2003 08:50:43 -0800 (PST) (envelope-from bmah@employees.org) Received: from bmah.dyndns.org (12-240-204-110.client.attbi.com[12.240.204.110]) by sccrmhc01.attbi.com (sccrmhc01) with ESMTP id <2003012016504200100hntnse>; Mon, 20 Jan 2003 16:50:42 +0000 Received: from intruder.bmah.org (localhost [IPv6:::1]) by bmah.dyndns.org (8.12.6/8.12.6) with ESMTP id h0KGofA8088073; Mon, 20 Jan 2003 08:50:41 -0800 (PST) (envelope-from bmah@intruder.bmah.org) Received: (from bmah@localhost) by intruder.bmah.org (8.12.6/8.12.6/Submit) id h0KGoeJi088072; Mon, 20 Jan 2003 08:50:40 -0800 (PST) Message-Id: <200301201650.h0KGoeJi088072@intruder.bmah.org> X-Mailer: exmh version 2.5+ 20021120 with nmh-1.0.4 To: Udo Erdelhoff Cc: freebsd-doc@FreeBSD.ORG, freebsd-security@FreeBSD.ORG, bmah@FreeBSD.ORG Subject: Re: Putting MD5 checksums on the web site In-Reply-To: <20030120065252.GB173@nathan.ruhr.de> References: <20030120065252.GB173@nathan.ruhr.de> Comments: In-reply-to Udo Erdelhoff message dated "Mon, 20 Jan 2003 07:52:52 +0100." From: bmah@FreeBSD.ORG (Bruce A. Mah) Reply-To: bmah@FreeBSD.ORG X-Face: g~c`.{#4q0"(V*b#g[i~rXgm*w;:nMfz%_RZLma)UgGN&=j`5vXoU^@n5v4:OO)c["!w)nD/!!~e4Sj7LiT'6*wZ83454H""lb{CC%T37O!!'S$S&D}sem7I[A 2V%N&+ X-Image-Url: http://www.employees.org/~bmah/Images/bmah-cisco-small.gif X-Url: http://www.employees.org/~bmah/ Mime-Version: 1.0 Content-Type: multipart/signed; boundary="==_Exmh_719035776P"; micalg=pgp-sha1; protocol="application/pgp-signature" Content-Transfer-Encoding: 7bit Date: Mon, 20 Jan 2003 08:50:40 -0800 Sender: owner-freebsd-doc@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --==_Exmh_719035776P Content-Type: text/plain; charset=us-ascii If memory serves me right, Udo Erdelhoff wrote: > some time ago, Bruce added the MD5 checksums for the 4.7 ISOs to > the release notes website (www/en/releases/4.7R/CHECKSUM-i386.MD5 > in the CVS repository). I think this is a good idea that should > be repeated for 5.0. I could assemble the file easily enough from > the various CHECKSUM.MD5 files for the different platforms by > sampling the mirrors. Just for the record, it was Murray who did this, not Bruce. :-) It's not an institutionalized policy, though I think it's a good idea. (Personally, I like the thought of putting the checksums in the release announcement.) > However, I think it would be a better idea to have that file assembled > and PGP-signed by the security-officer before adding it. Signing by one of the release engineers or by the security-officer team would be a Good Thing (TM). If the RE team had a shared signing key, we could use it for this, but we don't. Maybe we should, but that's another issue. Cheers, Bruce. --==_Exmh_719035776P Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.0 (FreeBSD) Comment: Exmh version 2.5+ 20020506 iD8DBQE+LCjg2MoxcVugUsMRAhHHAJ4uSA0iD5jVJIBz87pHaLfDkbdaTwCgopWu 72EnUdm+UG6fTplkgsXrZWM= =qaBJ -----END PGP SIGNATURE----- --==_Exmh_719035776P-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-doc" in the body of the message