Re: suspicious new e-mail address notification of a contributer
On Sun, 04 Sep 2005, Oohara Yuuma wrote:
> to it is not very safe. I have no other way to contact him.
> What should I do?
If he is a contributor to a package you take care of, write a message there
that he must send you a gpg-signed message from his new address.
Apparently he does not have a gpg key yet. So, that means he gets to do the
"find a DD to sign your key" dance. If he lives in Canada, that should not
be difficult to do. Of course, he getting into a keysign with anyone *you*
trust personally to not do stupid things when keysigning should be enough.
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
Reply to: