<div dir="auto">Yeah, more security and privacy, because Linux Audio packages are constantly attacked by enemies :D</div><div class="gmail_extra"><br><div class="gmail_quote">On Nov 21, 2017 06:44, "Ralf Mardorf" <<a href="mailto:ralf.mardorf@alice-dsl.net">ralf.mardorf@alice-dsl.net</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Tue, 21 Nov 2017 02:54:14 +0100, David Runge wrote:<br>
>Would it be possible to implement letsencrypt for <a href="http://linuxaudio.org" rel="noreferrer" target="_blank">linuxaudio.org</a> and<br>
>all of its subdomains?<br>
>This would greatly improve the security of the packages hosted there<br>
>(or rather their transfer from the server to the build machine) and<br>
>help for said packages not to be dropped, as more and more distros try<br>
>to switch to more reliable and authenticatable (is that a word?)<br>
>upstreams.<br>
<br>
Hi,<br>
<br>
for security reasons developers should consider to provide signed<br>
checksums, as fortunately e.g.<br>
<a href="https://www.kernel.org/category/signatures.html" rel="noreferrer" target="_blank">https://www.kernel.org/<wbr>category/signatures.html</a> does. This was<br>
discussed at e.g. Arch general.<br>
<br>
>Additionally, there is the benefit of raising privacy for users of all<br>
>things hosted on <a href="http://linuxaudio.org" rel="noreferrer" target="_blank">linuxaudio.org</a>.<br>
<br>
Not that much, since even when additionally using TOR, privacy isn't<br>
ensured without exceptions,<br>
<a href="https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting" rel="noreferrer" target="_blank">https://www.torproject.org/<wbr>docs/faq.html.en#<wbr>AttacksOnOnionRouting</a> .<br>
<br>
Regards,<br>
Ralf<br>
<br>
--<br>
$ pacman -Q linux{,-rt{,-cornflower,-<wbr>pussytoes}}|awk '{print $2}'<br>
4.14-2<br>
4.13.13_rt5-1<br>
4.11.12_rt16-1<br>
4.14_rt1-1<br>
______________________________<wbr>_________________<br>
Linux-audio-dev mailing list<br>
<a href="mailto:Linux-audio-dev@lists.linuxaudio.org">Linux-audio-dev@lists.<wbr>linuxaudio.org</a><br>
<a href="https://lists.linuxaudio.org/listinfo/linux-audio-dev" rel="noreferrer" target="_blank">https://lists.linuxaudio.org/<wbr>listinfo/linux-audio-dev</a><br>
</blockquote></div></div>