Processing of .changes files by dak
Russ Allbery wrote:
> Assuming the e-mail address on keys is mailable is also a bit dodgy, and
> which of the multiple identities on a key would one use?
The one that is stored associated to the account (DM or ldap and @d.o). It's not
that hard actually, after all, it has already been checked that the signature is
from a known uploader.
When doing that, one could also introduce mailing the sponsor of an upload if
the address used as Changed-By does not match any of the key UIDs.
Thomas Viehmann, http://thomas.viehmann.net/