Re: Digital Signatures

[Ben Goren <ben@trumpetpower.com>]

First, I have to question  the necessity of digital signatures for
OpenBSD in the  first place. If you don't trust  what you download
from the 'Net, buy a CD. Problem solved.

But,  if there  is a  need for  signatures, it  would seem  that a
self-signed  OpenSSL CA  certificate  included with  the CD  would
solve all the ``Web o' Trust'' issues.

As for the ease of use, it'd be trivial to write a quick script to
call openssl to either sign or verify a distribution file. There's
no reason it needs  to be more than a single  command (and maybe a
passphrase) for anybody.

b&

--
Ben Goren
 mailto:ben@trumpetpower.com
 http://www.trumpetpower.com/
 icbm:33o25'37"N_111o57'32"W

[demime 0.98d removed an attachment of type application/pgp-signature]