Re: CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution
Richard Lightman <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
* Max <[email protected]> [2002-10-11 13:04]: > > The scary thing is that _not a single project_ that > I have asked has started to provide pgp sigs yet! > I think this needs to be fixed before we start asking people to bother maintainers. We need to find out why your e-mails are being ignored - should they contain more information about why to use gpg, how to use gpg, or perhaps they are too big, and people are skimming them and not spotting the important bits. Could you post a sample e-mail here? Perhaps a bit of peer review will result in a template e-mail that maintainers are more likely to listen to. > > What do you think of a webpage containing > 1) a list of projects that have pgp sigs > 2) a list of projects that dont have pgp sigs + contact information I think this should wait until you have got some positive feed back from a few maintainers. > 3) a mini-howto explaining how to use (and the importance of) gpg/pgp > How about: http://www.gnupg.org/docs.html Richard -- Unsubscribe: send email to [email protected] and put 'unsubscribe lfs-security' in the subject header of the message