From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Fh8C6-00037e-RL for garchives@archives.gentoo.org; Fri, 19 May 2006 16:51:19 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.6/8.13.6) with SMTP id k4JGnQoC001159; Fri, 19 May 2006 16:49:26 GMT Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.181]) by robin.gentoo.org (8.13.6/8.13.6) with ESMTP id k4JGfPJ1017227 for ; Fri, 19 May 2006 16:41:25 GMT Received: by py-out-1112.google.com with SMTP id z59so980499pyg for ; Fri, 19 May 2006 09:41:24 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=q7PKoi6DGKYsfCTCmDlfczgQZhvUwe2yr4UMoGYWjWn+XvSM1UQEbn5adxY+NhVjUWmaYiu3TPDxFRucSNsmoDalcaeXDaPwjj0TUvRJwsEHu/3Y/D8J6EGgxizslXxRkH8sgtbxf1fT5wwDia1wp0tR9A5lFehTW5RmvSP0Ing= Received: by 10.35.98.6 with SMTP id a6mr1829602pym; Fri, 19 May 2006 09:41:24 -0700 (PDT) Received: by 10.35.66.10 with HTTP; Fri, 19 May 2006 09:41:24 -0700 (PDT) Message-ID: <623652d50605190941x1cd777c9r184f9bec708b3eb9@mail.gmail.com> Date: Fri, 19 May 2006 17:41:24 +0100 From: "Chris Bainbridge" To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Re: Signing everything, for fun and for profit In-Reply-To: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Disposition: inline References: <1147988717.32416.51.camel@localhost> Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by robin.gentoo.org id k4JGfPJ1017227 X-Archives-Salt: 5b584ced-fcb6-4292-9480-d8575e5d6cc6 X-Archives-Hash: 0344a17ea43ec922ba251aebc23c01e5 On 19/05/06, Peter wrote: > Who signs the Manifests? Why are some unsigned? Is there a single Gentoo > Security Key (like I know Slackware has and some other distros to ensure > the authenticity of their files)? Individual developers sign the manifests with their own gpg keys. Some are unsigned because there is no policy or techical requirement for them to be signed, so many developers don't. There is no single Gentoo key. -- gentoo-dev@gentoo.org mailing list