avalon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Berin Loritsch <blorit...@apache.org>
Subject Re: RES: Help needed on site update problem
Date Wed, 24 Sep 2003 14:37:36 GMT
hammett wrote:

> -----Mensagem original-----
> De: Niclas Hedhman [mailto:niclas@hedhman.org] 
> Excuse me, but I'd like to join this thread only to ask something: is
> there a way to protect a resource in CVS? I mean it could be downloaded
> and even changed by someone who have a login to CVS, but not available
> to public anonymous CVS access.
> The problem is: I need to sign Avalon assemblies with a private key to
> give it a Strong Name [1] but I don't like to make this private/public
> key pair available to anyone who could download the code, change it (
> mallicious intention ) and sign it as it was created by Avalon Team.

No way to do that.  Truth be told, the only things we can do is include
a set of keys that would be valid, and you keep the private half of the
equation on your machine.  The public half should be available on the
server somehow so that we can verify the release/bundle.


"They that give up essential liberty to obtain a little temporary safety
  deserve neither liberty nor safety."
                 - Benjamin Franklin

To unsubscribe, e-mail: dev-unsubscribe@avalon.apache.org
For additional commands, e-mail: dev-help@avalon.apache.org

View raw message