From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 15661 invoked from network); 5 Sep 2004 07:20:34 +0000 Received: from smtp.gentoo.org (156.56.111.197) by lists.gentoo.org with AES256-SHA encrypted SMTP; 5 Sep 2004 07:20:34 +0000 Received: from lists.gentoo.org ([156.56.111.196] helo=parrot.gentoo.org) by smtp.gentoo.org with esmtp (Exim 4.34) id 1C3rKE-0001rD-3Z for arch-gentoo-dev@lists.gentoo.org; Sun, 05 Sep 2004 07:20:34 +0000 Received: (qmail 1368 invoked by uid 89); 5 Sep 2004 07:20:33 +0000 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 11561 invoked from network); 5 Sep 2004 07:20:33 +0000 Date: Sun, 5 Sep 2004 03:20:36 -0400 From: Nicholas Jones To: gentoo-dev@lists.gentoo.org Message-ID: <20040905072036.GA7680@twobit.net> Mail-Followup-To: gentoo-dev@lists.gentoo.org References: <20040904222506.GA7667@pohl.lj.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="rwEMma7ioTxnRzrJ" Content-Disposition: inline In-Reply-To: <20040904222506.GA7667@pohl.lj.net> User-Agent: Mutt/1.5.6i Subject: Re: [gentoo-dev] Manifest signing advice: use gpg-agent! X-Archives-Salt: 4dd83b89-ade5-4c07-b72e-6b4b5addc474 X-Archives-Hash: 4f6708ec2bd07a44c8a94e6267866ca4 --rwEMma7ioTxnRzrJ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline > people putting their passphrase into the commit message. Ummmm... How exactly? The commit message isn't prompted if you are using repoman. You get one prompt _before_ your passphrase comes up. If you're doing that, then you really need to slow down. If you _DO_ manage to do this, be sure to invalidate your keys and pass the new fingerprint onto devrel. If there is an issue here that you feel can be resolved by a different kind of prompt, please let dev-portage know via a bug and we can get on it. --NJ --rwEMma7ioTxnRzrJ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFBOr5EBDOEqLMd+jQRAomLAJ9vppIE7tF4uClt5cq05/m/NpwM4wCffNuB ofjwUAaKsyYhWt8o6Wa9/gw= =FoZ2 -----END PGP SIGNATURE----- --rwEMma7ioTxnRzrJ--