Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Sep 2020 21:09:26 -0400
From:      grarpamp <grarpamp@gmail.com>
To:        freebsd-security@freebsd.org
Subject:   Re: 12.2R Sigs
Message-ID:  <CAD2Ti28c74jVbt2u9X1M7GHf%2B4d4YuZAQbDTg8rftBFNQZjpGQ@mail.gmail.com>
In-Reply-To: <20200918001257.GI26726@FreeBSD.org>
References:  <CAD2Ti2-YFpWp3-Ctc%2BraDhrW=4GQ0oQvX2Uau9QHrxU3yTS-ag@mail.gmail.com> <20200917204102.GG26726@FreeBSD.org> <CAD2Ti2_ewtpH5wiZZKB=p%2B2u2%2BUpRGuD%2BtpF55NDP%2BFuNU8XrA@mail.gmail.com> <20200918001257.GI26726@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
>> > And there is the PGP-signed email to stable@ that contains
>> > them.
>>
>> Future noting that lists do not support foreknown path schemes
>> for that data. Whereas repo, website and dataset locations are more
>> predictable and programmatic... allowing fetching, validation, etc.
>
> And for RC builds, they are predictable and programmatic.

Users would have to get and search the entire lists content to
find such sig posts, unfortunately no there are no nice predicted
paths to such single emails supporting simple fetch of associated
sig infos, ie: no schema <service>://<path_to_data>/13.x/<foo>.asc

Mail are not, it can't... ie: it has no hier, path, file globbing regex *, etc.

The website and distribution methods mentioned earlier are
possible. (Now just for RC and RELEASE, as clarified in thread.)

Website has them in nice paths today,

individually...
https://www.freebsd.org/releases/12.1R/signatures.html

and in bulk...
https://www.freebsd.org/releases/12.1R/announce.asc

but they are not present in what should be their natural
cohabitation set within the other distribution methods,
such as the case of https / ftp / rsync / torrent / etc for...
https://download.freebsd.org/ftp/releases/amd64/amd64/ISO-IMAGES/12.1/

> I am not on postmaster.

What that mean in context?
Only some volunteer for that role, as any other,
it's ok not to be in two or more of them.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAD2Ti28c74jVbt2u9X1M7GHf%2B4d4YuZAQbDTg8rftBFNQZjpGQ>