[Sugar-devel] Bundle format
C. Scott Ananian
cscott at laptop.org
Mon Nov 29 19:01:29 EST 2010
On Mon, Nov 22, 2010 at 11:07 PM, Bernie Innocenti <bernie at codewiz.org> wrote:
> On Mon, 2010-11-22 at 10:53 -0500, C. Scott Ananian wrote:
>> (oh, and the .zip file already has a checksum, it's not clear why
>> you'd need another one.)
> Ah, cool... but I guess it's not a cryptographically secure one, right?
Cryptographic security can be added to a manifest in the same way it
is done for jar files, for android zip files, and for any number of
other zip-based archives. In fact, it should be done *exactly* as in
one of those other formats. I believe I suggested 'jar'. Use the
existing tools, Luke.
( http://cscott.net/ )
More information about the Sugar-devel