Messages in this thread | | | Date | Tue, 19 May 2015 11:01:57 -0700 | Subject | Re: Should we automatically generate a module signing key at all? | From | Linus Torvalds <> |
| |
On Tue, May 19, 2015 at 10:58 AM, Andy Lutomirski <luto@amacapital.net> wrote: > > Throwing away the key is outright impossible in some contexts. > > https://wiki.debian.org/ReproducibleBuilds
Bah. That's just stupid.
Sure, if you have to use "cmp" to compare your builds, you can't embed random one-time keys. Tough.
That's a problem with your environment, and not a technical argument, it's a political one.
I couldn't care less. "Doctor, doctor, it hurts when I use a stapler on my forehead".
Debian has lots of "rules". That doesn't make it right.
Linus
| |