Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sign the distributed packages #40

Open
KOLANICH opened this issue Dec 24, 2018 · 6 comments
Open

Sign the distributed packages #40

KOLANICH opened this issue Dec 24, 2018 · 6 comments
Labels
to-do (secondary) Next release to-do

Comments

@KOLANICH
Copy link

Use GPG signatures with sha256 / blake instead.
@intika
Copy link
Owner

intika commented Dec 27, 2018

Thank you for your feedback :)
Currently the project is young and needs many important/urgent changes... i will consider that one, once Librefox will reach a stable situation, but for the moment i have to limit what should be done. but i keep that in mind don't worry ;)

@intika intika added the wontfix This will not be worked on label Dec 27, 2018
@intika intika closed this as completed Dec 27, 2018
@KOLANICH
Copy link
Author

i will consider

wontfix

Isn't it misuse of wontfix?

@intika
Copy link
Owner

intika commented Dec 27, 2018

wontfix in the current state of the project... as i have to come with a new build method for Librefox other than the one currently used, signature would be part of the new method, but won't be implemented on first releases as the project have a lot to integrate before looking into this.

@intika intika added the way-too-soon-for-this Feature that will be looked at after stabilizing the project. label Dec 27, 2018
@intika
Copy link
Owner

intika commented Dec 27, 2018 •
edited
Loading

i added a note on my to-do for this and added a new flag way-too-soon-for-this once the project reach some stable state i will reopen this for sure (the tag is there for that) its just that i really need to avoid overwhelming the to-do list for the moment.

But sure this is very important i know

@intika intika added the to-do (super-secondary) Next release to-do label Dec 28, 2018
@Atavic
Copy link

Atavic commented Dec 29, 2018

Issuer has his point, there are already Librefox packages on various free downloading sites.

@intika intika changed the title SHA1 should not be used for authentication Sign the distributed package Dec 29, 2018
@intika intika added to-do (secondary) Next release to-do and removed way-too-soon-for-this Feature that will be looked at after stabilizing the project. wontfix This will not be worked on to-do (super-secondary) Next release to-do labels Dec 29, 2018
@intika intika reopened this Dec 29, 2018
@intika
Copy link
Owner

intika commented Dec 29, 2018

Okay ;)

@intika intika changed the title Sign the distributed package Sign the distributed packages Dec 29, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
to-do (secondary) Next release to-do
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@KOLANICH @intika @Atavic