[Sugar-devel] Bundle format

[C. Scott Ananian]

On Mon, Nov 22, 2010 at 11:07 PM, Bernie Innocenti <bernie at codewiz.org> wrote:
> On Mon, 2010-11-22 at 10:53 -0500, C. Scott Ananian wrote:
>> (oh, and the .zip file already has a checksum, it's not clear why
>> you'd need another one.)
>
> Ah, cool... but I guess it's not a cryptographically secure one, right?

Cryptographic security can be added to a manifest in the same way it
is done for jar files, for android zip files, and for any number of
other zip-based archives.  In fact, it should be done *exactly* as in
one of those other formats.  I believe I suggested 'jar'.  Use the
existing tools, Luke.
  --scott

-- 
                         ( http://cscott.net/ )