[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632

--- Comment #17 from Martin Renvoize <martin.renvoize at ptfs-europe.com> ---
(In reply to Jonathan Druart from comment #15)
> You are assuming that an author who is trusted once is trusted for all the
> plugins they will write. This assumption is wrong IMO.

I agree with David here.. this work is to provide a way of verifying the code
is written by an author you trust.. not that this particular plugin is correct.
 As such, sharing a key is a fair and well-documented route that many systems
already use.

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.