Re: Good communication with upstream is good idea
On Sun, 27 Jul 2008 15:58:57 +0100 Neil Williams <codehelp@debian.org>
wrote:
>Why force activation in the first place? All the information needed to
>"activate" a DD account already exists - our GnuPG fingerprints, our DD
>email addresses and full names. If an email is received that is signed
>by a known key belonging to a DD, LP should just accept the blasted
>thing and stop looking for any other authentication or activation or
>login or anything else of any kind, ever. If someone can send an email
>to LP signed by my key then I have a lot more to worry about than
>whether LP is going to refuse to authenticate that email. Any email
>signed by a known key belonging to a DD should be accepted without
>question or authentication or activation or anything else.
Great idea. Bug filed:
https://bugs.launchpad.net/bugs/252368
Scott K
Reply to: