Issue of Signing Custom Builds

[Bryan Berry]

Hey guys,

I know that you guys are super crushed w/ Peru's deployment. We really
need cryptographically signed custom XO images for Nepal. 

As I have written to the developers list, we will need different images
for grades 2 and 6. Also, we need to load in the Flash Player 9 plugin
so we can use the awesome science curriculum developed by E-Shiksha in
India www.eshikshaindia.in . Gnash doesn't consistently support the
E-Shiksha content

Can you guys tell me when it might be possible for us to
cryptographically sign our own images so we don't have to leave the XO's
unlocked?

thanks,

Bryan
Kathmandu

On Mon, 2008-03-03 at 15:42 -0500, Benjamin M. Schwartz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> John Gilmore wrote:
> | I recommend that once you have developer keys, you leave the machines
> | unlocked.  You are going to be running a lot of unsigned builds in the
> | future -- you're customizing your builds.
> 
> Eventually, there must be a way for countries (and even trials) to get
> signed custom builds.  Either they get their own signing keys, or OLPC
> offers to sign a "nepal.1" branch of tweaked releases.  I understand why
> this infrastructure has not yet been built, but it will be needed in order
> for Bitfrost to be used at all.
> 
> - --Ben