[haiku-bugs] Re: [Haiku] #14927: HaikuDepot doesn't show any packages

  • From: "Haiku" <trac@xxxxxxxxxxxx>
  • To: undisclosed-recipients: ;
  • Date: Mon, 18 Nov 2019 15:15:41 -0000

#14927: HaikuDepot doesn't show any packages
---------------------------------------+----------------------------
   Reporter:  KapiX                    |      Owner:  apl-haiku
       Type:  bug                      |     Status:  reopened
   Priority:  normal                   |  Milestone:  Unscheduled
  Component:  Applications/HaikuDepot  |    Version:  R1/Development
 Resolution:                           |   Keywords:
 Blocked By:                           |   Blocking:
Has a Patch:  0                        |   Platform:  All
---------------------------------------+----------------------------
Comment (by waddlesplash):

For trusting the repo, sha256 is useless as long as there is no signing.

 Uh... why? The sha256 authenticates the "repo" file as authentic, and the
 "repo" file itself contains sha256sums for the HPKG files. So as long as
 the checksum for the "repo" is retrieved from a trusted source securely,
 all subsequent downloads will also be verifiable. It's not as good as GPG
 signing, sure; but it's very close by many metrics.
-- 
Ticket URL: <https://dev.haiku-os.org/ticket/14927#comment:18>
Haiku <https://dev.haiku-os.org>
The Haiku operating system.

Other related posts: