--Apple-Mail-2--520141288
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII; format=flowed


On Nov 11, 2004, at 9:07 AM, Thor Lancelot Simon wrote:

> Perhaps we need the concept of a package "source" or "publishing 
> entity";
> so one could ask the package tools to list out only packages published
> by "NetBSD-pkgsrc", for instance, instead of by "NetBSD-src"; so the
> default pkg_info invocation could skip packages published by 
> "NetBSD-src",
> in other words "skip system packages" but one could easily tell it not
> to.

I think this is a marvelous idea, and by using certificates to identify 
the publisher, you could leverage it to sign the individual packages, 
as well.

         -- Jason R. Thorpe <thorpej@shagadelic.org>


--Apple-Mail-2--520141288
content-type: application/pgp-signature; x-mac-type=70674453;
	name=PGP.sig
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQFBk59aOpVKkaBm8XkRArKMAJ9EUxITTP0evLIoHavKMN57MC2/3wCfex4w
JtVAVtN+LHK02ejWl6FO5Uw=
=PL5S
-----END PGP SIGNATURE-----

--Apple-Mail-2--520141288--