From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: Torrenting GuixSD! Date: Wed, 25 Feb 2015 22:47:43 +0100 Message-ID: <87fv9t3bpc.fsf@gnu.org> References: <54DE3317.7090002@riseup.net> <87vbj5e83e.fsf@fsf.org> <20150213205028.3f7cb9ba@PocketWee> <87wq382w45.fsf@gnu.org> <20150223205440.GA25828@debian> <87vbiqw0o4.fsf@gnu.org> <20150225141215.GA5109@debian.math.u-bordeaux1.fr> <87oaoidn19.fsf@netris.org> <20150225175156.GA6653@debian.math.u-bordeaux1.fr> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:37188) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YQjoF-0005qs-F4 for guix-devel@gnu.org; Wed, 25 Feb 2015 16:48:00 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1YQjoC-0001VO-A6 for guix-devel@gnu.org; Wed, 25 Feb 2015 16:47:59 -0500 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:52347) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YQjoC-0001VK-7e for guix-devel@gnu.org; Wed, 25 Feb 2015 16:47:56 -0500 In-Reply-To: <20150225175156.GA6653@debian.math.u-bordeaux1.fr> (Andreas Enge's message of "Wed, 25 Feb 2015 18:51:56 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Andreas Enge Cc: guix-devel@gnu.org, Polchi Andreas Enge skribis: > On Wed, Feb 25, 2015 at 10:32:50AM -0500, Mark H Weaver wrote: >> If we were to extend this argument to non-torrent downloads, then all >> of our downloads (source tarballs and images) should be tar files >> containing a signature bundled with the thing being signed. mit-krb5 >> follows this policy with their source tarballs. > > No, extending this argument to non-torrent downloads means that we should > advertise the signature next to the actual file. What about having the .sig URL right next the the Torrent URI on the web page? I think it would work the same in terms of =E2=80=9Ceducation=E2=80= =9D. Ludo=E2=80=99.