This is the mail archive of the
mailing list for the Cygwin project.
setup.exe.sig not verifiable?
- From: Patrick Strasser <patrick dot strasser at tugraz dot at>
- To: cygwin at cygwin dot com
- Date: Thu, 13 Jan 2011 12:04:36 +0100
- Subject: setup.exe.sig not verifiable?
I saw on the install page that you can check the validity of the
setup.exe with the provided signature file and PGP keyring. Great!
Unfortunately I cannot find a trust path to the signature. It seems that
only Dave Korn signed with his key 0x6A388C3E, but his key is unsigned.
So how should I know that not all three, setup.exe, setup.exe.sig and
the keyring are tampered? Or am I missing something?
Engineers motto: cheap, good, fast: choose any two
Patrick Strasser <patrick dot strasser at student dot tugraz dot at>
Student of Telemati_cs_, Techn. University Graz, Austria
Problem reports: http://cygwin.com/problems.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple