[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Release.gpg



On Thu, Jan 17, 2002 at 07:09:40PM +0100, Martin Michlmayr wrote:
> * Anthony Towns <aj@azure.humbug.org.au> [20020115 12:02]:
> > Note that the 2001 key expires in a day or two. The 2002 key is
> > available from and should be signed by both me and the 2001 key.
> > It expires mid January in 2003.
> When woody is released and someone installs it from CD-ROM in February
> 2003, they will get a warning that the key has expired.  

The theory is that the 2003 key will be created mid-December, and that the
stable Release file will be signed with it then (as well as the 2002 key),
which means you should be fine unless the CD you're using is over a month
old.

In practice, it's not relevant, since the Release files from the
archive won't be being used on CDs yet for technical reasons. Also,
new installations don't "really" have the opportunity to check Release
signatures.

Cheers,
aj

-- 
Anthony Towns <aj@humbug.org.au> <http://azure.humbug.org.au/~aj/>
I don't speak for anyone save myself. GPG signed mail preferred.

The daffodils are coming. Are you?
      linux.conf.au, February 2002, Brisbane, Australia
                                --- http://linux.conf.au/

Attachment: pgpfpmptUyjtN.pgp
Description: PGP signature


Reply to: