[GSoC] Proposal: Authentication for scripted plasmoid downloaded from the web

[Marco Martin]

On Sun, Apr 4, 2010 at 3:39 PM, Diego Casella ([Po]lentino)
<polentino911 at gmail.com> wrote:
> Hi guys,
> sorry for being late, however here it is my proposal for this summer of
> code.
> Since, during PlasMate development, we talked a bit about the possibility to
> verify the plasmoids downloaded from kde-look.org or opendesktop.org,
> I think about it for a while and I came whit the idea to improve
> plasmaengineexplorer (plus plasmapkg and PlasMate, if there wil be enough
> time) in order
> to use the QCA api to provide plasmoids authentication. Here it is my
> implementation details (see the full proposal here
> http://socghop.appspot.com/gsoc/student_proposal/private/google/gsoc2010/diego_casella/t127038771188):
>
> My idea is to use the QCA framework in order to verify the signature of the
> plasmoids downloaded from kde-look.org, opendesktop.org, or installed with
> plasmapkg/PlasMate. This will require patching the plasma widgetexplorer and
> plasmapkg (and also PlasMate in order to support the package signing
> process, if time permits that).

This is a must have and was in the todo since day one...
as Chani said i'm not sure if is better at Plasma Package level or at
a broader thing for all ghns stuff

Cheers,
Marco Martin