public inbox for gentoo-dev@lists.gentoo.org
 help / color / mirror / Atom feed
Search results ordered by [date|relevance]  view[summary|nested|Atom feed]
thread overview below | download: 
* [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests
       [not found]     <20130212211415.GA4364@linux1>
@ 2013-02-12 23:12 99% ` Michael Weber
  0 siblings, 0 replies; 1+ results
From: Michael Weber @ 2013-02-12 23:12 UTC (permalink / raw
  To: gentoo-dev

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 02/12/2013 10:14 PM, William Hubbs wrote:
> If you have any questions on this, please feel free to let us
> know.
What is the rotation strategy for (near) outdated keys?
Alter the key or create a new one? Sign the new with the old one?

IMHO the answer to these questions is not obvious nor given by (our)
docu [1].

Maybe, add "keep ldap id/fingerprint synchronized" there, too.


> [1]
> http://devmanual.gentoo.org/general-concepts/manifest/index.html

- -- 
Michael Weber
Gentoo Developer
web: https://xmw.de/
mailto: Michael Weber <xmw@gentoo.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iF4EAREIAAYFAlEazGMACgkQknrdDGLu8JBXygD8CalxwI4y7kxbqYwyXcyohtbW
7xICGdFgIDA8jH7v4poA/RrtQTxwmmzE4g53Eyg8RBKxEIa0BmAZUaAMIyM9ntdq
=XOfU
-----END PGP SIGNATURE-----


^ permalink raw reply	[relevance 99%]

Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
     [not found]     <20130212211415.GA4364@linux1>
2013-02-12 23:12 99% ` [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests Michael Weber

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox