News for hackers. Stuff that matters.

A comment on Signify: Securing OpenBSD from Us to You. Parent comment

Re:Signify: Securing OpenBSD from Us to You by what_the_diffie on Friday June 12, 2015 @11:08PM (#9709732)
If end-to-end sec (e.g., crypto signatures) are used, like say with Debian packages which uses GPG, packages and metadata can be released over http without a problem.
[ Parent | on HN ]
Re:Signify: Securing OpenBSD from Us to You by nickpsecurity on Friday June 12, 2015 @11:11PM (#9709741)
Exactly. One of many reasons the developers went with an end-to-end solution instead of HTTPS. It makes the transport mechanism moot except for the initial key exchange.
[ Parent | on HN ]