Reply to post: Re: No chain of trust?

Et tu, Gentoo? Horrible gits meddle with Linux distro's GitHub code

phuzz Silver badge

Re: No chain of trust?

From TFA:

"Since the master Gentoo ebuild repository is hosted on our own infrastructure and since GitHub is only a mirror for it, you are fine as long as you are using rsync or webrsync from," Warner said."

So yeah, there's a chain of trust, unless you chose not to follow it and to download from Github instead.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon