On pon, 2017-04-10 at 15:21 +0200, Dirkjan Ochtman wrote: > On Mon, Apr 10, 2017 at 8:37 AM, Michał Górny <mgo...@gentoo.org> wrote: > > It is always nice when a person who: > > Please stop the sarcasm. While I understand the reaction, the idea in > itself does not seem totally crazy to me, and it seems useful to have > a discussion on its merits. > > At the same time, I would not consider it far-fetched to say that you > proposed significant changes to handling of manifest hashes, without > deep knowledge of the security aspects of the hashing algorithms up > for discussion.
I'm not sure if you're trying to insult me or just make a random point. Even letting that pass by, I find quite a difference between not having a 'deep knowledge' of something, and not having a 'basic knowledge'. > This is sometimes how we learn. If you feel the thread > wastes time, you can just ignore it (as you seem to have done with the > manifest hashes thread after a few critical responses, somewhat to my > disappointment). Ignoring threads on thread that is mostly abandoned to terribly low level of posts frequently results in people putting their terrible ideas without even bothering to wait for a competent reply. As for that Manifest thread, I didn't notice any post that would request any reply. As far as I can see, it was mostly hijacked into 'why we still don't have proper verification, and why asking questions about it does not make it happen?!' -- Best regards, Michał Górny
signature.asc
Description: This is a digitally signed message part
