Re: Secrecy and user trust

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 09/09/2008, David Shaw <dshaw@xxxxxxxxxxxxxxx> wrote:

>  I'm one of the GnuPG developers, and as such, a copy of my key is in
>  /usr/share/doc/gnupg-1.4.x/samplekeys.asc on any system that has
>  gnupg-1.4 installed.  It's a key that many (most?) Fedora users
>  already have, and had before this current problem even started.  This
>  doesn't mean people should necessarily trust my key, of course, but it
>  does serve as a pretty effective pre-distributed key that can be
>  leveraged for this as its very wide distribution would make it
>  difficult to replace out from under someone without the mischief being
>  very visible (much the same argument that also holds for the new
>  package signing key, of course, except that my key is already widely
>  distributed).
>
>  As luck has it, I work around half an hour away from the Red Hat
>  Massachusetts office.

Now that, seems like a really good idea :o)

How about you sign, e.g. Jesse's key (if he's willing)?

>  David

Bill

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux