hannesm

7 ms·

31.
by hannesm 11y ago
It is not clear to me what you are reading in the proposal. There is no need for DNS and SSL hosting. Packages are put as tarball onto the Internet. Then in the opam-repository the metadata, including a signature over the tarball. The tarba
32.
by hannesm 11y ago
I cannot follow your claim "stronger procedures and guarantees than what we are getting here". CAs might be useful for a single resource, but we have here a bag of packages and want to distribute the whole repository (with end-to-
33.
by hannesm 11y ago
You should briefly think how opam does updates currently: a repository on GitHub where developers submit their pull requests. This won't change too much. Guarantees are: if a new package from a new developer is submitted, basically non
34.
by hannesm 11y ago
The quorum definitively helps. If too few keys/people are remaining, there are two options: download and install an updated opam (with a new set of keys) out of band OR using another opam-repository (with e.g. trust-on-first-use) for a
35.
Signing the OPAM Repository: TUF Meets Git(opam.ocaml.org)
42 points by hannesm 11y ago|20 comments
36.
by hannesm 12y ago
"ASN parsing code, in general"... this sounds like you're a bit stuck in ad-hoc ASN.1 parsers written in C... We actually use combinators for doing that - this explains our ASN.1 library in more depth: http://openm
37.
by hannesm 12y ago
you're looking at the wrong branch... https://github.com/pqwy/mirage-tcpip/tree/pinata
38.
by hannesm 12y ago
This is about the DigestInfo -- which we generate and compare here: https://github.com/mirleft/ocaml-tls/blob/master/lib/handsha... The unpad does RSA unpadding... or am I completely mistaken?
39.
by hannesm 12y ago
that wouldn't help - would it? any owner of the bitcoin secret can sign this message and include it then in the pinata... for online signing we'd first need to implement the bitcoin protocol... or am I getting something wrong?
40.
OCaml-TLS: the protocol implementation and mitigations to known attacks(openmirage.org)
59 points by hannesm 12y ago|2 comments
41.
by hannesm 15y ago
Well, let's face it: There's only one compiler actively maintained. And its license is MIT! NB: written in Dylan itself! This even has an IDE (on Windows only), but has some problems with error reporting, producing too much output while com