Re: GPG Signatures for Installers
Wichert Akkerman <[email protected]>
| Newsgroups | gmane.comp.web.zope.plone.installers |
|---|---|
| Organization | Simplon |
| Message-ID | <[email protected]> |
On 10/26/08 8:25 PM, Alexander Limi wrote: > On Sun, 19 Oct 2008 14:46:11 -0700, Steve McMahon > <[email protected]> wrote: > > >> And ... should we each be signing with our own keys, or should the >> installer >> team share a (hopefully well controlled) key pair? >> > > I would recommend a shared key pair that belongs to the Plone Foundation > in some way. Different keys (that may change depending on who's the > maintainer) would be confusing. > Small problem: we have no good trust path to generate and distribute such a key. Wichert. -- Wichert Akkerman<[email protected]> It is simple to make things. http://www.wiggy.net/ It is hard to make things simple. ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Plone-installers mailing list Plone-installers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org https://lists.sourceforge.net/lists/listinfo/plone-installers