Re: Bits from keyring-maint: Pushing keyring updates. Let us bury your old 1024D key!
On Tue, Mar 04, 2014 at 12:45:05PM +0800, Paul Wise wrote:
> On Tue, Mar 4, 2014 at 12:28 PM, Gunnar Wolf wrote:
>
> > About a schedule: No, we do not currently have it. We should work on
> > getting a plan for this. Now, it is not an easy task to get done, and
> > as we might effectively end up locking out many DDs, I'm thinking (and
> > I have not yet talked this over in the team, but we should discuss it)
> > we should get formal support from the project in the form of a GR or
> > something like that... Of course, that after sketching a real plan
> > with stages and dates.
>
> Surely this is well within keyring-maint purview and a GR is thus
> unnessecary? Running the plan by debian-project seems a reasonable
> level of consultation.
We didn't need one for removing PGPv3 keys so I don't see why we'd need
one for 1024D v4 keys.
I have already suggested a timescale to -project but haven't seen any
comments on it other than "you should script this" and "should we relax
the requirement for 2 signatures".
J.
--
Minorities are the foundation of society.
Reply to: