in reply to Re: The Future - Shipping Applications Written in Perl
in thread The Future - Shipping Applications Written in Perl

Stuff MD5, CPAN should move to PGP signed packages, like Debian. Every perl distro should be shipped with CPANs public keys. Then you can get your packages from anywhere, and you can be sure they are safe... as long as you got your perl from an approved supplier.

____________________
Jeremy
I didn't believe in evil until I dated it.

  • Comment on Re: Re: The Future - Shipping Applications Written in Perl

Replies are listed 'Best First'.
Re: Re: Re: The Future - Shipping Applications Written in Perl
by John M. Dlugosz (Monsignor) on Jun 20, 2001 at 23:45 UTC
    Good idea, in general. If I distribute a ZIP or gz or whatever with everything in it, I can provide a matching pgp sig file. But I wonder if it would be a good idea to have sig files for individual .pm files, since those can be checked after the stuff has been installed.