From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: AS22989 209.51.188.0/24 X-Spam-Status: No, score=-3.9 required=3.0 tests=AWL,BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,NICE_REPLY_A, RCVD_IN_DNSWL_MED,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS, SPF_PASS shortcircuit=no autolearn=ham autolearn_force=no version=3.4.2 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id A1F2E1F8C6 for ; Sun, 1 Aug 2021 15:47:30 +0000 (UTC) Received: from localhost ([::1]:54146 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mADgX-0005Z6-Aa for normalperson@yhbt.net; Sun, 01 Aug 2021 11:47:29 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:43014) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mADgU-0005Yj-53 for bug-gnulib@gnu.org; Sun, 01 Aug 2021 11:47:26 -0400 Received: from mout.kundenserver.de ([212.227.17.24]:34055) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mADgS-0007Pp-CN for bug-gnulib@gnu.org; Sun, 01 Aug 2021 11:47:25 -0400 Received: from [192.168.101.10] ([91.12.164.105]) by mrelayeu.kundenserver.de (mreue106 [212.227.15.183]) with ESMTPSA (Nemesis) id 1M8hIl-1mEueP1rcH-004mxo; Sun, 01 Aug 2021 17:47:20 +0200 Subject: Re: announce-gen and OpenPGP key servers To: Simon Josefsson , bug-gnulib@gnu.org References: <87y29sf65o.fsf@latte.josefsson.org> From: Bernhard Voelker Message-ID: <07a9c597-5c07-ec61-7d3c-32b503063be2@bernhard-voelker.de> Date: Sun, 1 Aug 2021 17:47:19 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0 MIME-Version: 1.0 In-Reply-To: <87y29sf65o.fsf@latte.josefsson.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:EqzPkPyUITiu9aUgqNOQFKR9J16VQRypqH97EQ7MpvvwzhUUbF0 2qzVC8VJ/H80r4Q+M4E19/uskkfpcg2C4HPsPvr0Yuqgig81o0OtKQfGCRN7osmjIhfB3MO bSHUFR2+HWQ4ritOd4OtW5rw1+WeBrPlaxTh/qxcRCRRZWYGRfNnZ2debDLRnsIg9+DIfOf DPIFshiWs4YA+RRiXd1KQ== X-UI-Out-Filterresults: notjunk:1;V03:K0:IQOZ9HbA/ck=:1SOIn9ki2W8yzQzC+nBVDR rG55RWGOpGVweZ8VJMzosSw1iEokWqWBbiSw0Atkjdnlrf8qDRs1cAWt77Y/588r92hqm1YNw IUkmnl6I7xhPFuhrn4bHql5Eb1etqEdGCXAiCTxCawIzOCt/j+ihepfOVu6G34cxO+dFMSNZh VlAsIKPXSW7sMYNJ0VWqy6Ip8zpcvTx7IRR/xRhr1cm2Wxj8o64a17tNJmcsO4ekTbn7bb5vD 8OxYXV+7w9K1dhcmjpxBCMOddA0fquBIdlC5d0v+X9aD9cYPGMqNYbAyNNqScmNalL4lFVKlg 8ce/x3U4Cqt4dNFeDVQnfqzI5S2AWrdXCkYuXhm4R+FqC1tKHr+HBUKX7/1UUvPhhj0SQNsmf scIZu2jTNsgsl/zuwFBXmCdVK1K0zY1Mi2kXguPRLadm6Yabmts6wFkxyA5S4XacN7bwVVvVS wSf5U3L2YZ64Hp7JWAekBugkPj3nXL7JAVMuNf4lNwuoIQQ8FbJOI2XdnP4aUj81yYR0FjyVk jx9OAS+ZRJXBafzQ8hrjoUIXrAWt5rJ5tCvT/WIpsTMuUciOASjETcFC+7mgmXCv2+Cej+J1f gSC5aB8c9gzWMWgRxOYHwJNldf+ldl6exIPM0HSDlhOi9xHrtfHuMod/M/ZkJHzt0uCaZTrWM 8SmYr65AmggJjoEy90lgXm+Xw08W7fORRq6n3HBG22fF29p2VkFU7/gV9FkZnTR2MRkKT/Nc5 hegNRuiUMG4rJ0OZhL7/j6Y0G4zP7ps8/n6zy35Df9FCBKkCGwdV2Bjv57nmlSvJaDRbS3N7J sZJicOxk+bnQzkk7mYgwMaMc3SZ6W396fdj2enKEjp76/Ego5JD9Jo0Uj9CoRTq10WRqDu/Jr oUrifo2IB1H50VeEiDTA== Received-SPF: none client-ip=212.227.17.24; envelope-from=mail@bernhard-voelker.de; helo=mout.kundenserver.de X-Spam_score_int: -19 X-Spam_score: -2.0 X-Spam_bar: -- X-Spam_report: (-2.0 / 5.0 requ) BAYES_00=-1.9, NICE_REPLY_A=-0.08, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: bug-gnulib@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Gnulib discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnulib-bounces+normalperson=yhbt.net@gnu.org Sender: "bug-gnulib" On 7/27/21 11:38 AM, Simon Josefsson via Gnulib discussion list wrote: > Let's discuss and see what we can do. Isn't this what the "release GPG keys" on Savannah are for? Each project maintainer can set them up correctly under "Edit public info": "https://savannah.gnu.org/project/admin/editgroupinfo.php?group=${PROJECT}" The result can be downloaded by users for verification: "https://savannah.gnu.org/project/release-gpgkeys.php?group=${PROJECT}&download=1" e.g. coreutils': "https://savannah.gnu.org/project/release-gpgkeys.php?group=coreutils&download=1" Downstream sometimes use them, e.g. SUSE and openSUSE are verifying the keys on their Open Build Service. Have a nice day, Berny