In a medical application there must be secured that all downloaded datapacks
are truly from the source that they claim they are.
This could be easily done by signing them with a private/public async GPG
signing system.
While downloading a datapack the GPG signature can be verified and if it isn't
correct, FMF refuses to install the datapack.
Original issue reported on code.google.com by christian.a.reiter@gmail.com on 28 Nov 2012 at 9:50
Original issue reported on code.google.com by
christian.a.reiter@gmail.com
on 28 Nov 2012 at 9:50