[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Processing of .changes files by dak

Russ Allbery wrote:
> Assuming the e-mail address on keys is mailable is also a bit dodgy, and
> which of the multiple identities on a key would one use?
The one that is stored associated to the account (DM or ldap and @d.o). It's not
that hard actually, after all, it has already been checked that the signature is
from a known uploader.
When doing that, one could also introduce mailing the sponsor of an upload if
the address used as Changed-By does not match any of the key UIDs.

Kind regards

Thomas Viehmann, http://thomas.viehmann.net/

Reply to: