[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: serious problems with Mr. Troup



On Sun, 22 Feb 2004 03:52:43 +0100, Josip Rodin <joy@srce.hr> said: 

> On Sat, Feb 21, 2004 at 07:53:19PM -0600, Manoj Srivastava wrote:
>> > It's standard procedure for non-DD to get someone with a key in
>> > the keyring to sign their message so that it will go through
>> > debian-devel-announce. Think of it as a form of sponsorship, for
>> > mailing lists instead of packages.
>>
>> I would expect to see the developers name on the headers of the
>> message, then.  It should not appear to come from the non-dd.

> Well, as much as I'd like to agree with you on that, if we make a
> what seems to be a valid parallel with sponsored uploads, we don't
> require people to put their name in Changed-By or Maintainer or
> other fields, only that they check the package. They can be traced
> through the signature, like in this case.

	There is a reason sponsored uploads are done -- it allows
 people to get experience developing packages, and helps them get a
 head start in the NM process. It gets software into Debian that would
 not otherwise get in.

	I fail to see how getting an inappropriate message on to d-d-a
 qualifies -- unless you compare it to sponsoring a trojan to by pass
 the normal safeguards we have about unrestricted uploads into the
 archive. 

	manoj
-- 
Gee, I feel kind of LIGHT in the head now, knowing I can't make my
satellite dish PAYMENTS!
Manoj Srivastava   <srivasta@debian.org>  <http://www.debian.org/%7Esrivasta/>
1024R/C7261095 print CB D9 F4 12 68 07 E4 05  CC 2D 27 12 1D F5 E8 6E
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C



Reply to: