Re: GPG Signatures for Installers
"Steve McMahon" <[email protected]>
| Newsgroups | gmane.comp.web.zope.plone.installers |
|---|---|
| Message-ID | <[email protected]> |
> Small problem: we have no good trust path to generate and distribute such a > key. Given the limited number of folks we need to coordinate, I think we can manage it. You, Sidnei and I could exchange public keys. I think Limi or Geir would recognize all our voices, and could be used to verify public-key fingerprints by voice contact. You could generate a keypair and send it to Sidnei and I encrypted against public keys, signed with yours. It's an awkward procedure, but our group of installer creators is small and stable. On Sun, Oct 26, 2008 at 12:53 PM, Wichert Akkerman <[email protected]> wrote: > On 10/26/08 8:25 PM, Alexander Limi wrote: > > On Sun, 19 Oct 2008 14:46:11 -0700, Steve McMahon > <[email protected]> wrote: > > > > And ... should we each be signing with our own keys, or should the > installer > team share a (hopefully well controlled) key pair? > > > I would recommend a shared key pair that belongs to the Plone Foundation > in some way. Different keys (that may change depending on who's the > maintainer) would be confusing. > > > Small problem: we have no good trust path to generate and distribute such a > key. > > Wichert. > > -- > Wichert Akkerman <[email protected]> It is simple to make things. > http://www.wiggy.net/ It is hard to make things simple. > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer's challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Plone-installers mailing list > Plone-installers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org > https://lists.sourceforge.net/lists/listinfo/plone-installers > > -- Steve McMahon Reid-McMahon, LLC steve-HR5nRXif9uVv8oa/[email protected] [email protected] ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/