dgit rpush ought to work fairly well for the stuations where debrsign
might be used, and does not have this ssh trust reversal problem.
(It still operates rather as a signing oracle but the signing oracle
is much more restricted.)
Ian.
--
Ian JacksonThese opinions are my own.
If I emailed
Control: tag -1 - patch
On 02/16/2017 07:44 PM, Daniel Kahn Gillmor wrote:
> Package: developers-reference
> Version: 3.4.18
> Severity: normal
> Control: tags -1 patch
> Control: affects -1 devscripts
>
This bug doesn't seem to actually include a patch.
Cheers,
Julien
Package: developers-reference
Version: 3.4.18
Severity: normal
Control: tags -1 patch
Control: affects -1 devscripts
Please do not mention debrsign in the developers-reference. The
workflow encouraged by debrsign is less secure than the one we'd like
to recommend for developers (it involves the u
3 matches
Mail list logo
