[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Official Debian digital 'branding' of debs



Hi,
>>"Nicolás" == Nicolás Lichtmaier <nick@debian.org> writes:

 Nicolás>  But there IS a single point of failure. All solutions you
 Nicolás> can image will have that. If you have developers sign
 Nicolás> packages with their own keys, you'll need a mean to
 Nicolás> `authorize' developers, in the form of a Debian signature to
 Nicolás> the developers' signature.

        Not true. The presence of the developers keys in the
 debian-keyring package should be enough, as long as you have a secure
 keyring. Having a detatched signature on the keyring made by the
 master key is your security. 
        
        manoj
-- 
 Old age is too high a price to pay for maturity.
Manoj Srivastava   <srivasta@debian.org>  <http://www.debian.org/%7Esrivasta/>
Key C7261095 fingerprint = CB D9 F4 12 68 07 E4 05  CC 2D 27 12 1D F5 E8 6E


Reply to: