From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 8A6311581D3 for ; Thu, 30 May 2024 07:43:14 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 26791E29E1; Thu, 30 May 2024 07:43:10 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B13EFE29A7 for ; Thu, 30 May 2024 07:43:09 +0000 (UTC) From: Ulrich Mueller To: Sam James Cc: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Last rites: sec-keys/openpgp-keys-jiatan In-Reply-To: <875xuwfoqs.fsf@gentoo.org> (Sam James's message of "Wed, 29 May 2024 19:37:47 +0100") References: <875xuwfoqs.fsf@gentoo.org> Date: Thu, 30 May 2024 09:42:59 +0200 Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Archives-Salt: 8a5fa275-fa99-42c3-bfb8-0a768d97e12e X-Archives-Hash: 1ea65dd8a6671a00a0b3607d19665a96 --=-=-= Content-Type: text/plain >>>>> On Wed, 29 May 2024, Sam James wrote: > # Sam James (2024-05-29) > # OpenPGP key of malicious xz co-maintainer. This key is no longer used > # by any ebuilds in tree. Removal on 2024-06-29. > # Bug #928134. > sec-keys/openpgp-keys-jiatan Just out of interest, by what chain of trust was this key added, in the first place? Ulrich --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEtDnZ1O9xIP68rzDbUYgzUIhBXi4FAmZYLgMPHHVsbUBnZW50 b28ub3JnAAoJEFGIM1CIQV4u75IH/jN6ZfXCeYNJHCsh5KK+2RvwGRXKO2dMQM0t WGxgomL5N64TTYPCxFumXG+ntqLKiQS7BBdQ6Fs43KYg995DkkmFIEJER4P6nq/y thq/k5sMEdyU1uDw+nS0UUquU+/fWsHxxOiQuxsOhwBqpfoyM7CuJ+liY7Yl8xK5 BoP8hsjpKXvfZiUyr2jDDpLJe6/1mqrIJisq5qdP+ZpWmpBAn6eZgjGNqEzVfXSv AdvqNXJEyODAAMJbkFQoposPZ/FdU6IQxFHO9sMZQtXSEFp3PR5OyLiSezmaslnj Hn+Otl3WRACn9yy4W7rQ2LOgNKAgKwM3StRMGREm3SjJ5oj2bsw= =GUgl -----END PGP SIGNATURE----- --=-=-=--