Re: gsu (Was Re: More Political Stuff)

[Havoc Pennington <hp redhat com>]

Malcolm Tredinnick <malcolm@commsecure.com.au> writes: 
> If we just adopt a policy of digitally signing themes, then there is
> no need to have a "safe theme" file on each machine. A user would
> download a theme, the signature would be checked and if it was
> verified, the theme would install.
> 

There's a big reason Debian never did the digital signatures, which is
that it tends to take on a responsibility/liability that most
volunteers won't be willing to take on. 

Do you want to be the person that promises "yes, this is safe" and
gets threatened with lawsuits if it isn't?

Havoc