[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Good communication with upstream is good idea

On Sun, 27 Jul 2008 15:58:57 +0100 Neil Williams <codehelp@debian.org> 

>Why force activation in the first place? All the information needed to
>"activate" a DD account already exists - our GnuPG fingerprints, our DD
>email addresses and full names. If an email is received that is signed
>by a known key belonging to a DD, LP should just accept the blasted
>thing and stop looking for any other authentication or activation or
>login or anything else of any kind, ever. If someone can send an email
>to LP signed by my key then I have a lot more to worry about than
>whether LP is going to refuse to authenticate that email. Any email
>signed by a known key belonging to a DD should be accepted without
>question or authentication or activation or anything else.

Great idea.  Bug filed:


Scott K

Reply to: