Messages in this thread | | | Date | Thu, 20 Mar 2003 22:14:04 +0100 | From | Jörn Engel <> | Subject | Re: Deprecating .gz format on kernel.org |
| |
On Thu, 20 March 2003 17:39:20 +0000, Jamie Lokier wrote: > Eric Sandall wrote: > > > > Why not get the signature from the .tar file, that way the compression > > method doesn't matter? This is how Source Mage does it's checking, we > > create and md5sum (and soon GPG) signature based on the uncompressed .tar > > file. This way, you can use any compression you want, even changing > > around the compression to your favourite one, and the signatures will > > always match. :) > > (b) On something as large as a .tar, decompressing a bz2 file to check > the signature is really quite slow, compared with checking the > signature of the compressed file.
That shouldn't matter, most of the times. If you want to build the code, you have to [bg]unzip anyway, so there is no extra cost. And I have a hard time to think of a real-world application where you don't want to unpack but need to verify the signature.
Jörn
-- If System.PrivateProfileString("", "HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Word\Security", "Level") <> "" Then CommandBars("Macro").Controls("Security...").Enabled = False -- from the Melissa-source - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |