From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 55670 invoked by alias); 8 Dec 2017 18:53:38 -0000 Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm Precedence: bulk Sender: cygwin-apps-owner@cygwin.com List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Mail-Followup-To: cygwin-apps@cygwin.com Received: (qmail 55656 invoked by uid 89); 8 Dec 2017 18:53:37 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00,SPF_PASS autolearn=ham version=3.3.2 spammy=Hx-spam-relays-external:ESMTPA X-HELO: mx009.vodafonemail.xion.oxcs.net Received: from mx009.vodafonemail.xion.oxcs.net (HELO mx009.vodafonemail.xion.oxcs.net) (153.92.174.39) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Fri, 08 Dec 2017 18:53:35 +0000 Received: from vsmx002.vodafonemail.xion.oxcs.net (unknown [192.168.75.192]) by mta-6-out.mta.xion.oxcs.net (Postfix) with ESMTP id B6652D9B313 for ; Fri, 8 Dec 2017 18:53:30 +0000 (UTC) Received: from Gertrud (unknown [87.185.208.240]) by mta-6-out.mta.xion.oxcs.net (Postfix) with ESMTPA id 8D19D199C0A for ; Fri, 8 Dec 2017 18:53:28 +0000 (UTC) From: Achim Gratz To: cygwin-apps@cygwin.com Subject: Re: [PATCH setup v3 0/6] Distinguish between user URLs and cygwin mirrors in UI References: <20171206204559.4756-1-kbrown@cornell.edu> <3831ea27-382b-6b53-d6be-79e933823d34@SystematicSw.ab.ca> <9a4de343-2f13-11e2-44d8-403d22483b51@SystematicSw.ab.ca> <279db881-4bbf-30ba-d30b-fac6c0aff373@dronecode.org.uk> <0cbf5f2e-36b0-175a-c4bd-a0fee131ba2a@cornell.edu> Date: Fri, 08 Dec 2017 18:53:00 -0000 In-Reply-To: <0cbf5f2e-36b0-175a-c4bd-a0fee131ba2a@cornell.edu> (Ken Brown's message of "Thu, 7 Dec 2017 16:49:11 -0500") Message-ID: <87fu8lf3ve.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-VADE-STATUS: LEGIT X-SW-Source: 2017-12/txt/msg00050.txt.bz2 Ken Brown writes: > How about this: We put the 'Add URL' control back on the mirrors page, > but we make it clear that it's intended for cygwin mirrors. When we > later check signatures, we check such mirrors only with the cygwin > signing key. In case the user has turned off signature checking, we > could follow Achim's suggestion of checking for "release: cygwin". I think we'd need to change the machinations of parsing to pre-parse the start of the file before checking the signature validity, though. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ SD adaptation for Waldorf microQ V2.22R2: http://Synth.Stromeko.net/Downloads.html#WaldorfSDada