From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1NJ8SU-0000wT-39 for garchives@archives.gentoo.org; Fri, 11 Dec 2009 16:35:10 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CA259E07A7; Fri, 11 Dec 2009 16:34:08 +0000 (UTC) Received: from smtprelay01.ispgateway.de (smtprelay01.ispgateway.de [80.67.18.43]) by pigeon.gentoo.org (Postfix) with ESMTP id A0A92E07A7 for ; Fri, 11 Dec 2009 16:34:08 +0000 (UTC) Received: from [93.210.45.173] (helo=arkane.local) by smtprelay01.ispgateway.de with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from ) id 1NJ8RT-0007cE-KY for gentoo-dev@lists.gentoo.org; Fri, 11 Dec 2009 17:34:07 +0100 Received: by arkane.local (Postfix, from userid 1000) id CE01663C6; Fri, 11 Dec 2009 17:32:54 +0100 (CET) Date: Fri, 11 Dec 2009 17:32:54 +0100 From: Torsten Veller To: gentoo-dev@lists.gentoo.org Subject: [gentoo-dev] Re: Individual developer signing Message-ID: <20091211163254.GA10718@veller.net> Mail-Followup-To: gentoo-dev@lists.gentoo.org References: <7c612fc60911251350k3560b7d7sf4e9c867a30b0d90@mail.gmail.com> <20091130113051.GA32489@chopin.edu.pl> <4B14369D.1040608@gentoo.org> <20091203103242.GA6316@veller.net> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Face: ===_______=8)_=8)_______A_very_very_nice_face_______=8)_=8)_______=== Jabber-ID: tove@jabber.ccc.de X-PGP-Fingerprint: 0416 3C11 8D79 65B9 AAD0 2065 BBC7 14D1 9C67 CD96 User-Agent: Mutt/1.5.20 (2009-12-07) X-Df-Sender: 1067115 X-Archives-Salt: 1bb31fc8-f35b-41f0-b465-e5294cffaa19 X-Archives-Hash: 916259a058f3c0572f915a8cf8ae42fa * "Robin H. Johnson" : > > BTW: About a third of the Manifests are signed [1]. We didn't improve > > [1] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest.png > > [2] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/ratio_2005.png > > [3] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest2.png > Nice graphs. Can you show them over a larger timespan? Yes, I recreated them from cvs and the keys available now. [1] and [3] show the progress for the last year and [4] the history since May 2004. - In Jan 2008 the transition to Manifest2 was finished and all signatures were dropped. - I guess [2] didn't "require-cross-certification" while gnupg now defaults to "require-cross-certification". So the number of valid signatures in [4] is lower than in [2]. After the "Manifest2"-break the level is lower. [4] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest-all.png