From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 62B1A138334 for ; Mon, 8 Jul 2019 15:03:05 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 386DDE0869; Mon, 8 Jul 2019 15:03:04 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 128F4E0867 for ; Mon, 8 Jul 2019 15:03:03 +0000 (UTC) Received: from [192.168.1.12] (xdsl-78-34-133-86.nc.de [78.34.133.86]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: jstein) by smtp.gentoo.org (Postfix) with ESMTPSA id 7C702346DEA for ; Mon, 8 Jul 2019 15:03:02 +0000 (UTC) Subject: [gentoo-project] Re: Do we need to update GLEP 63? (was: Impact of SKS attacks on Gentoo) To: gentoo-project@lists.gentoo.org References: <0ebb4c674e6396731181198853ef78215023f728.camel@gentoo.org> From: Jonas Stein Openpgp: preference=signencrypt Message-ID: Date: Mon, 8 Jul 2019 17:02:57 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.7.2 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-Archives-Salt: 2dc90d23-8626-4310-8d1b-c378a392ccb2 X-Archives-Hash: 8775142788f6099f37c9783102d0e752 On 07/07/2019 23.40, Thomas Deutschmann wrote: > GLEP 63 [1] currently says >> 5.1 Bare minimum requirements >> >> [...] >> 5.1.7 Upload your key to the SKS keyserver rotation before usage! > I think this will require an update for keys.gentoo.org or should be > removed. I fully agree. -- Best, Jonas