[Rpm-maint] [rpm-software-management/rpm] Ensure unique tags for in signature header (#1570)

[Demi Marie Obenour]

> They're not any safer in there than they are in the signature header.

They are if the signature covers them!  The problem with them being in the signature header is that there is no reasonable way to sign these entries.  I would like to be able to cryptographically verify everything that goes into the rpmdb.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1570#issuecomment-794330071
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210309/c4025bef/attachment.html>