[Rpm-maint] [rpm-software-management/rpm] RFE: Detached signature support (#1482)

[Demi Marie Obenour]

> > Detached signatures are problematic for mirrored content because it's very difficult to guarantee that those files are synced together.
> 
> The same problem already exists for different rpms that depend on each other. The meta data of a repository is also already spread over multiple files. (I still see rare reports for mirrors failing this way.)

One solution to all of these problems is to never update a file (except the root metadata file) in-place, and instead have every other file in the repository be addressed by hash.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1482#issuecomment-1081132394
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/1482/1081132394 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20220328/0373860a/attachment-0001.html>