Re: popularity-contest and gpg

2025-03-27 Thread Peter Pentchev
On Fri, Mar 28, 2025 at 12:44:47AM +0200, Peter Pentchev wrote: > On Thu, Mar 27, 2025 at 10:46:23PM +0100, Bill Allombert wrote: > > On Thu, Mar 27, 2025 at 11:22:50PM +0200, Peter Pentchev wrote: > > > > I am among the people who have moved towards the Sequoia family of > > > > cryptographic tool

Re: popularity-contest and gpg

2025-03-27 Thread Peter Pentchev
On Thu, Mar 27, 2025 at 10:46:23PM +0100, Bill Allombert wrote: > On Thu, Mar 27, 2025 at 11:22:50PM +0200, Peter Pentchev wrote: > > > I am among the people who have moved towards the Sequoia family of > > > cryptographic tools; in particular, sqop (a Sequoia implementation of > > > the SOP comman

Re: popularity-contest and gpg

2025-03-27 Thread Bill Allombert
On Thu, Mar 27, 2025 at 11:22:50PM +0200, Peter Pentchev wrote: > > I am among the people who have moved towards the Sequoia family of > > cryptographic tools; in particular, sqop (a Sequoia implementation of > > the SOP command-line interface) seems to work: > > > > [roam@straylight ~]$ echo

Re: popularity-contest and gpg

2025-03-27 Thread Bill Allombert
On Thu, Mar 27, 2025 at 08:46:53PM +0100, Simon Josefsson wrote: > Bill Allombert writes: > > > Dear Debian developpers, > > > > popularity-contest relies on /usr/bin/gpg for encrypting files. > > (it cannot use gpgv which does not provide encryption). > > Why does it need to encrypt data? > >

Re: popularity-contest and gpg

2025-03-27 Thread Peter Pentchev
On Thu, Mar 27, 2025 at 11:05:11PM +0200, Peter Pentchev wrote: > On Thu, Mar 27, 2025 at 07:45:12PM +0100, Bill Allombert wrote: > > Dear Debian developpers, > > > > popularity-contest relies on /usr/bin/gpg for encrypting files. > > (it cannot use gpgv which does not provide encryption). > > >

Re: popularity-contest and gpg

2025-03-27 Thread Julian Andres Klode
On Thu, Mar 27, 2025 at 07:45:12PM +0100, Bill Allombert wrote: > Dear Debian developpers, > > popularity-contest relies on /usr/bin/gpg for encrypting files. > (it cannot use gpgv which does not provide encryption). > > By design popularity-contest needs to have as few non-essential > dependenci

Re: popularity-contest and gpg

2025-03-27 Thread Peter Pentchev
On Thu, Mar 27, 2025 at 07:45:12PM +0100, Bill Allombert wrote: > Dear Debian developpers, > > popularity-contest relies on /usr/bin/gpg for encrypting files. > (it cannot use gpgv which does not provide encryption). > > By design popularity-contest needs to have as few non-essential > dependenci

Re: popularity-contest and gpg

2025-03-27 Thread Simon Josefsson
Jeremy Stanley writes: > On 2025-03-27 20:57:52 +0100 (+0100), Petter Reinholdtsen wrote: >> [Simon Josefsson] >> > Why does it need to encrypt data? >> >> To protect the users privacy. >> >> > Can't we just send telemetry over https like everyone else? >> >> Not all popcon submissions go over ht

Re: popularity-contest and gpg

2025-03-27 Thread Jeremy Stanley
On 2025-03-27 20:57:52 +0100 (+0100), Petter Reinholdtsen wrote: [Simon Josefsson] > Why does it need to encrypt data? To protect the users privacy. > Can't we just send telemetry over https like everyone else? Not all popcon submissions go over https, the fallback mechanism is SMTP. Also,

Re: popularity-contest and gpg

2025-03-27 Thread Simon Josefsson
Bill Allombert writes: > Dear Debian developpers, > > popularity-contest relies on /usr/bin/gpg for encrypting files. > (it cannot use gpgv which does not provide encryption). Why does it need to encrypt data? Can't we just send telemetry over https like everyone else? For people who are uncom

Re: popularity-contest and gpg

2025-03-27 Thread Petter Reinholdtsen
[Simon Josefsson] > Why does it need to encrypt data? To protect the users privacy. > Can't we just send telemetry over https like everyone else? Not all popcon submissions go over https, the fallback mechanism is SMTP. -- Happy hacking Petter Reinholdtsen

popularity-contest and gpg

2025-03-27 Thread Bill Allombert
Dear Debian developpers, popularity-contest relies on /usr/bin/gpg for encrypting files. (it cannot use gpgv which does not provide encryption). By design popularity-contest needs to have as few non-essential dependencies as possible because this skews the result. It used to be the case that apt