-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 11 Nov 2004, Jason Thorpe wrote:

>
> On Nov 11, 2004, at 9:07 AM, Thor Lancelot Simon wrote:
>
>> Perhaps we need the concept of a package "source" or "publishing entity";
>> so one could ask the package tools to list out only packages published
>> by "NetBSD-pkgsrc", for instance, instead of by "NetBSD-src"; so the
>> default pkg_info invocation could skip packages published by "NetBSD-src",
>> in other words "skip system packages" but one could easily tell it not
>> to.
>
> I think this is a marvelous idea, and by using certificates to identify the
> publisher, you could leverage it to sign the individual packages, as well.

`Cool'.

I too, like the idea of a `pkg originator' field much better than the 
original binary `is a syspkg / is a third party pkg' that I had proposed 
in the syspkg drafts.

- -- 
				Jim Wise
				jwise@draga.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (NetBSD)

iD8DBQFBk5/ZpRpI6SYACmIRAjv1AJ9hyI9D67qLzxeEQqficAqkau64egCgox3v
fl3hxSMgcuVcTUxz9p1NZiY=
=o6Qx
-----END PGP SIGNATURE-----