Re: Authentication with LP for DD's using gnupg

2008-08-01 Thread Tollef Fog Heen
]] Neil Williams | As mentioned in other replies, Debian is a special case for Ubuntu | IMHO. And Launchpad is used by more than just Ubuntu. Can this discussion soon be taken to launchpad-users or somewhere more appropriate? I can't see it has much to do with Debian development any more. --

Re: Authentication with LP for DD's using gnupg

2008-08-01 Thread Jonathan McDowell
On Fri, Aug 01, 2008 at 08:32:52AM -0700, Steve Langasek wrote: > On Fri, Aug 01, 2008 at 12:07:34PM +0200, Martin Zobel-Helas wrote: > > rsync keyring.debian.org::keyrings/keyrings/debian-keyring.gpg > > can be synced publicly > > Well, what trust path does that give us if LP uses rsync to copy

Re: Authentication with LP for DD's using gnupg

2008-08-01 Thread Steve Langasek
On Fri, Aug 01, 2008 at 12:07:34PM +0200, Martin Zobel-Helas wrote: > On Fri Aug 01, 2008 at 10:42:52 +0100, Neil Williams wrote: > > > On Sun, Jul 27, 2008 at 03:58:57PM +0100, Neil Williams wrote: > > > > > > * Reinhard Tartler [Wed, Jul 23 2008, 04:36:39PM]: > > > > > >> > How about activating

Re: Authentication with LP for DD's using gnupg

2008-08-01 Thread UlisesVitulli
Neil Williams escribió: > What about the .dsc files? > > .changes files are lost (so we don't have access to the Changed-By: > field) but .dsc is retained in the Debian pool and therefore available > to the Ubuntu sync process. The .dsc exists for all packages. > > It would be relatively simple to

Re: Authentication with LP for DD's using gnupg

2008-08-01 Thread Martin Zobel-Helas
Hi, On Fri Aug 01, 2008 at 10:42:52 +0100, Neil Williams wrote: > > On Sun, Jul 27, 2008 at 03:58:57PM +0100, Neil Williams wrote: > > > > > * Reinhard Tartler [Wed, Jul 23 2008, 04:36:39PM]: > > > > > > >> > How about activating it the first time they send a gpg-signed > > mail to > > > > >> >

Authentication with LP for DD's using gnupg

2008-08-01 Thread Neil Williams
> On Sun, Jul 27, 2008 at 03:58:57PM +0100, Neil Williams wrote: > > > > * Reinhard Tartler [Wed, Jul 23 2008, 04:36:39PM]: > > > > >> > How about activating it the first time they send a gpg-signed > mail to > > > >> > the mail interface? > > > How about simply allowing any DD to send gpg-signed