[haiku-bugs] Re: [Haiku] #14927: HaikuDepot doesn't show any packages
- From: "Haiku" <trac@xxxxxxxxxxxx>
- To: undisclosed-recipients: ;
- Date: Thu, 21 Nov 2019 07:57:15 -0000
#14927: HaikuDepot doesn't show any packages
---------------------------------------+----------------------------
Reporter: KapiX | Owner: apl-haiku
Type: bug | Status: reopened
Priority: normal | Milestone: Unscheduled
Component: Applications/HaikuDepot | Version: R1/Development
Resolution: | Keywords:
Blocked By: | Blocking:
Has a Patch: 0 | Platform: All
---------------------------------------+----------------------------
Comment (by pulkomandy):
Replying to [comment:21 kallisti5]:
We could also sign all packages... but that's a lot of work.
And unneeded, that's the point of having the sha256 of the packages in the
repo file and then signing the repo file. As long as sha256 is safe to
use, we're fine.
Signing each package would add an extra feature: the ability to safely
share packages offline (just copy an hpkg from some random person machine
to yours, and you can check if it's really a package from Haiku even
without access to the matching repo file). It could also be used to
control the integrity of an existing haiku install, even if the packages
in it are out of date and not in the current repofile anymore.
But all that is extra features for later, and only useful if the signature
is stored inside the hpkg file itself (or as an xattr, maybe?)
--
Ticket URL: <
https://dev.haiku-os.org/ticket/14927#comment:22>
Haiku <
https://dev.haiku-os.org>
The Haiku operating system.
Other related posts:
