Skip site navigation (1) Skip section navigation (2)

Re: New ftp layout

From: blacknoz(at)club-internet(dot)fr
To: dpage(at)vale-housing(dot)co(dot)uk, troels(at)arvin(dot)dk,pgadmin-hackers(at)postgresql(dot)org
Subject: Re: New ftp layout
Date: 2004-12-03 17:20:16
Message-ID: mnet3.1102090816.9402.blacknoz@club-internet.fr (view raw or flat)
Thread:
Lists: pgadmin-hackers

>> -----Original Message-----
>> From: pgadmin-hackers-owner(at)postgresql(dot)org 
>> [mailto:pgadmin-hackers-owner(at)postgresql(dot)org] On Behalf Of 
>> Troels Arvin
>> Sent: 03 December 2004 14:10
>> To: pgadmin-hackers(at)postgresql(dot)org
>> Subject: Re: [pgadmin-hackers] New ftp layout
>> 
>> 2. I suggest that CURRENT_MAINTAINER files be added
>>    in the RPM-directories. The files should - 
>>    apart from our names, etc. - contain a link to 
>>    the relevant public key of the packager, i.e.
>>    http://troels.arvin.dk/pgp/
>>    or
>>    http://www.gunduz.org/devrimgunduz.pgp.pub
>
>Yup, I just haven't got around to that yet (I only added them to the
>existing layout a couple of days ago).


Can you explain something to me? Why don't you /simply/ upload your key to a keyserver?
To me, gpg signing is efficient if (at least):
- your key is available from a third party
- your key is signed by someone you trust
- you have all the required files to inform people the key has been compromised. IMHO, uploading your key to a public keyserver makes it mandatory for you to generate revocation certificates... Something you may not do if your key is not much distributed.
- your private key is protected (I mean not on a host on the net)

I bet we won't be able to sign each other but why not (Hey Dave, still ok for next summer holidays ? ;p)

The only pub key I distribute in the deb repo is the key used to sign debian unofficial repository release files. This key is not on keyserver because it does not meet the above requirements.

Having the key on a keyserver helps getting the pub keys rapidly as people first think the key is available on a keyserver(?).

Thanks for teaching me,
Raphaël


Responses

pgadmin-hackers by date

Next:From: Raphaël EnriciDate: 2004-12-04 10:24:30
Subject: Re: New ftp layout
Previous:From: Dave PageDate: 2004-12-03 17:15:31
Subject: Re: New ftp layout

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group