Re: Rpm-metadata Digest, Vol 16, Issue 4

seth vidal <[email protected]>
Newsgroups gmane.linux.rpm.metadata
Message-ID <1108929131.7032.7.camel@cutter> 
On Sun, 2005-02-20 at 13:02 -0600, Randy Zagar wrote:
>What makes you think I'm joking?
>
>The RPMs themselves contain SHA-1, MD5 checksums and GPG signatures.
>
>Why shouldn't the XML metadata files contain all relevant software
>validation metadata?

Well, if you want to validate the pkgs you check gpg signatures, not
sha1sums or md5sums.

so instead of just adding more data w/o any real use to the metadata it
would make more sense, to me, to work on gpg signing.

-sv
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.