Hello DSA, I am writing to you to help us decide whether it is pertinent to do a move right now, or whether we should wait for you to implement anything.
Bug #1101418 (for which you have been Cc:d already) requests renaming the Debian keyrings from *.gpg to *.pgp, as we are dealing with OpenPGP objects, and are not tied to a GnuPG install; the reason *.gpg was chosen over 15 years ago is mostly historic, and should be reverted, particularly given the hostility of the GnuPG upstream development towards the OpenPGP community. Guillem kindly prepared some patches to do this, and after some discussion, added the creation of some symlinks. The result of the patch in question will be that the keyrings published in kaufmann.debian.org will be renamed from *.gpg to *.pgp, and that symlinks will be created preserving the original names; in the future, we might work towards removing the symlinks. We need input from DSA to make sure we can perform this change. some specific points we discussed on IRC are: - ftp-master processing - Email address to db.debian.org - vote.debian.org - Validation of mails sent to signed-only lists But, of course, other subsystems might also need it. We believe everything will work transparently if rsync is properly set to mirror symlinks. I intend to do a keyring push by Thursday or Friday, and it would be great if we could deploy the patch by then. But, as we agreed in the keyring-maint channel, I won't do the move unless we get your go-ahead Greeetings!
signature.asc
Description: PGP signature