On Wed, 1 Jun 2011 11:04:45 +0800 Paul Wise <pabs@debian.org> wrote: > On Tue, May 31, 2011 at 8:31 AM, Karl Goetz <karl@kgoetz.id.au> wrote: > > > Do you mean packages.debian.org style? > > No, I mean http://ftp.debian.org style where you can see directory > listings. That seems rather bizarre. > > What sort of trust path? How would you propose we create one? I > > suppose we could get all the derivatives keys added to a package in > > debian, sounds complex though. > > Standard GPG trust paths, maybe what we require for DMs. Not sure > where to go from there. Would be an interesting thing to work out. having someone who is well connected in the WOT with access to the distros private key would provide a starting point for the trust path. kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group
Attachment:
signature.asc
Description: PGP signature