LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Arch
User Name
Password
Arch This Forum is for the discussion of Arch Linux.

Notices


Reply
  Search this Thread
Old 03-31-2011, 09:29 PM   #1
AK-33
Member
 
Registered: Aug 2010
Location: Canada
Posts: 31

Rep: Reputation: 2
Why No Digital Signing??


I think I want to switch to Arch, but I have serious security concerns about the lack of digital package signing. I don't know if it's because of the daily rolling releases that makes it difficult to support or whatever.

Does anyone know where I can dl a vetted copy of the iso?
 
Old 03-31-2011, 11:08 PM   #2
andrewthomas
Senior Member
 
Registered: May 2010
Location: Chicago Metro
Distribution: Arch, Gentoo, Slackware
Posts: 1,690

Rep: Reputation: 312Reputation: 312Reputation: 312Reputation: 312
http://www.archlinux.org/iso/2010.05/md5sums.txt

http://www.archlinux.org/iso/2010.05/sha1sums.txt
 
1 members found this post helpful.
Old 03-31-2011, 11:23 PM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Providing hashes is different from actual package signing, right?
 
1 members found this post helpful.
Old 04-01-2011, 01:00 AM   #4
AK-33
Member
 
Registered: Aug 2010
Location: Canada
Posts: 31

Original Poster
Rep: Reputation: 2
Well, unlike Slackware, Arch does not have an official release. If they did, I guess it would be the same thing.


Edit: I purchased a copy of Arch-32 from ShopLinuxOnline.com. Problem solved.

Last edited by AK-33; 04-01-2011 at 02:59 AM.
 
0 members found this post helpful.
Old 04-01-2011, 07:26 AM   #5
reed9
Member
 
Registered: Jan 2009
Location: Boston, MA
Distribution: Arch Linux
Posts: 653

Rep: Reputation: 142Reputation: 142
Quote:
Originally Posted by AK-33 View Post
I think I want to switch to Arch, but I have serious security concerns about the lack of digital package signing. I don't know if it's because of the daily rolling releases that makes it difficult to support or whatever.
http://www.toofishes.net/blog/real-s...ckage-signing/
 
3 members found this post helpful.
Old 04-01-2011, 11:11 PM   #6
AK-33
Member
 
Registered: Aug 2010
Location: Canada
Posts: 31

Original Poster
Rep: Reputation: 2
Quote:
Originally Posted by reed9 View Post
Ah, so the way I see it, the main contributors to the Arch Linux project do not currently have the time to support the code for package signing.

Well, at least there's hope in the "very distant future."
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
New digital signing sofware usign digital certificates mikelga Linux - Software 1 01-04-2009 09:02 AM
LXer: Digital Freedom: Fighting for your Digital Rights LXer Syndicated Linux News 0 08-18-2007 01:50 AM
Signing in avarus LinuxQuestions.org Member Intro 1 04-03-2004 10:31 PM
signing in hotmail wilbertcsci Linux - Software 7 11-02-2003 06:55 AM
Self Signing Certificates mikeyt_333 Linux - Security 3 06-13-2002 05:58 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Arch

All times are GMT -5. The time now is 10:16 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration