#6286: Please sign all RC and TC images
-------------------------+------------------------
Reporter: genodeftest | Owner: rel-eng@…
Type: enhancement | Status: new
Milestone: | Component: koji
Keywords: | Blocked By:
Blocking: |
-------------------------+------------------------
Current situation: TC and RC images are provided on an server that does
not force encryption (
http://dl.fedoraproject.org/pub/alt/stage/ ) and
does not provide any signatures (see e.g.
http://dl.fedoraproject.org/pub/alt/stage/23_RC10/Workstation/x86_64/iso/
).
Attacker model:
* many government intelligence agencies including (but not limited to) NSA
and GCHQ
* some companies
* criminals
have an interest to intrude PCs of most people in the world. Especially
testers (often software developers themselves) are at risk for being
attacked since they are a high-value target for redistributing malware.
Having unsigned software to download is one way to make this possible.
Please provide Signatures for all RC and TC images in the future.
--
Ticket URL: <
https://fedorahosted.org/rel-eng/ticket/6286>
Fedora Release Engineering <
http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project