Re: PROPOSAL: GPG Signing of Releases

--On Friday, April 9, 2004 11:05 AM -0500 kfogel@collab.net wrote:

> So, those of us who want to do that for the next release will just do
> it. That will probably include at least those of us in Chicago. I
> hope no one will mind if we call it the "SVN Release Key" or something
> similarly official-sounding. There's no reason to have two such keys,
> after all -- anyone who wants to can just sign this one (we can easily
> generate trust paths).

I'm sorry, but I think this is a completely pointless exercise. Once again,
I'll strongly advise that you don't create a shared key - even for a 'test'
run. Once you create it, we're going to be bound to use it forever - whether
you think we should or not - it's there and its absence will cause worry among
people who have seen it before.

I think you're also ignoring the fact that most of the other developers have
stated that they are against having a shared key. -- justin

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sat Apr 10 09:40:32 2004