First release of LibreSSL portable is available

Re:First release of LibreSSL portable is available by panzi on Friday July 11, 2014 @04:54PM (#8022333)

I think there is a much more important feature in git for OpenBSD: cryptographic hashes of all commits that depend on the parent commit (=> cryptographically hashed history). Combine that with commit signing and detecting tampering gets easy. There are reported cases where this helped the Linux kernel project detect tampering.

Or have they implemented something like this on top of CVS?

[ Parent | on HN ]

Re:First release of LibreSSL portable is available by oskdfjgfgg on Friday July 11, 2014 @09:29PM (#8023396)

OpenBSD combines two seldom used techniques. First, not having millions of lines of code written by random untrusted people. This allows them to use the second technique, which is to actually read their code.

[ Parent | on HN ]

Re:First release of LibreSSL portable is available by panzi on Saturday July 12, 2014 @06:03PM (#8025913)

Well, that is not good enough. How can you proof that already read (audited) code wasn't tampered afterwards by a hacker? If you don't use cryptographic hashes you can't.

[ Parent | on HN ]