Bug#732445: debian-policy should encourage verification of upstream cryptographic signaturse

To: Russ Allbery <rra@debian.org>, 732445@bugs.debian.org
Cc: Daniel Kahn Gillmor <dkg@fifthhorseman.net>, Bill Allombert <ballombe@debian.org>
Subject: Bug#732445: debian-policy should encourage verification of upstream cryptographic signaturse
From: Guillem Jover <guillem@debian.org>
Date: Tue, 25 Mar 2014 01:26:55 +0100
Message-id: <[🔎] 20140325002655.GA21650@pulsar.hadrons.org>
Reply-to: Guillem Jover <guillem@debian.org>, 732445@bugs.debian.org
In-reply-to: <[🔎] 87eh1rp33a.fsf@windlord.stanford.edu>
References: <20131218042238.4510.24427.reportbug@alice.fifthhorseman.net> <[🔎] 20140322161952.GA10855@yellowpig> <[🔎] 87vbv3jit4.fsf@alice.fifthhorseman.net> <[🔎] 87eh1rp33a.fsf@windlord.stanford.edu>

Hi!

On Mon, 2014-03-24 at 16:51:53 -0700, Russ Allbery wrote:
> I use:
> 
>     gpg --export --armor --export-options export-minimal <key> \
>         > debian/upstream/signing-key.asc
> 
> to generate this file for my packages.

I've been using pgp-clean (signing-party), which seems to generate
even smaller files.

Thanks,
Guillem

Reply to:

References:
- Bug#732445: debian-policy should encourage verification of upstream cryptographic signaturse
  - From: Bill Allombert <ballombe@debian.org>
- Bug#732445: debian-policy should encourage verification of upstream cryptographic signaturse
  - From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
- Bug#732445: debian-policy should encourage verification of upstream cryptographic signaturse
  - From: Russ Allbery <rra@debian.org>

Prev by Date: Bug#732445: debian-policy should encourage verification of upstream cryptographic signaturse
Next by Date: Bug#685506: Problem with *.zip archives
Previous by thread: Bug#732445: debian-policy should encourage verification of upstream cryptographic signaturse
Next by thread: Bug#491547: web server policy requires /var/www, not in FHS
Index(es):
- Date
- Thread