Secrecy and user trust

[Kevin Fenzi]

On Tue, 02 Sep 2008 16:52:08 -0400
vestwearingpunk at gmail.com (Travis Arnold) wrote:

> John Aldrich wrote:
...snipp...
> > Unless/until someone from Fedora says "It is safe to install Fedora
> > 9 from the original ISO images distributed when F9 was released" I
> > am not going to trust that they are safe.
> > 
> Hey I am currently downloading the ISO dvd to install after I finish
> my day's lessons, is this not a good idea to do?

From:
http://www.redhat.com/archives/fedora-announce-list/2008-August/msg00012.html

"At this time we are confident there is little
risk to Fedora users who wish to install or upgrade signed Fedora
packages."

This pretty heavily implies to me that the iso images are fine as
shipped when F9 was released. Do you expect the project to announce
each item that is ok? Instead, please expect that anything that was
bad/wrong/shouldn't be used would be heavily announced and removed from
download. 

Also, you might consider using the fedora
unity respin and save yourself some time downloading updates: 
http://spins.fedoraunity.org/spins


> Travis
> 

kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20080902/3356aaca/attachment-0001.sig>