3 ms·
This bug (#597804) links to bug #597800 [0] titled "emerge-webrsync: Downloads .gpgsig by default, but doesn't verify it." That's where the details are (and pr
by jlgaddis 10y ago
This bug (#597804) links to bug #597800 [0] titled "emerge-webrsync: Downloads .gpgsig by default, but doesn't verify it."
That's where the details are (and probably where this submission should point).
[0]: https://bugs.gentoo.org/show_bug.cgi?id=597800 https://bugs.gentoo.org/show_bug.cgi?id=597800
- hannob 10y agoPlease note that this is only related to the webrsync-method. While securing that would be good, it's not the default. So even if we had a secure emerge-webrsync-feature it'd still leave most users vulnerable.