[db-wg] DB signatures

I assume time stamps are UTC, ftp shows 10/12/17, 10:12:00 PM, now it is
Fri Oct 13 22:57:17 2017 UTC
I would say 24h+ update for such data is too much.
Also having signatures / checksums is a standard security measure for any
downloads and are very easy to implement.


On Fri, Oct 13, 2017 at 1:58 PM, denis walker <ripedenis at yahoo.co.uk> wrote:

> Hi Aliaksei
>
> The files are regenerated daily. There are some checks done on the files
> as part of the generation process, like zero size check or size difference
> more than some percentage from yesterday. Perhaps the RIPE NCC can comment
> on the possibility of signing or checksum files?
>
> cheers
> denis
> co-chair DB WG
>
> ------------------------------
> *From:* Aliaksei Sheshka via db-wg <db-wg at ripe.net>
> *To:* db-wg at ripe.net
> *Sent:* Friday, 13 October 2017, 19:45
> *Subject:* [db-wg] DB signatures
>
> Hello!
>
> I would like to know if there is a plan to sign / checksum files located
> at
> ftp://ftp.ripe.net/ripe/dbase/split/ ?
> Currently there is no mechanism to know if files aren't tampered or
> corrupted.
>
> My second question is how often those files are updated?
>
> Thanks!
>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ripe.net/ripe/mail/archives/db-wg/attachments/20171013/70c5bb77/attachment.html>