From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: AS22989 209.51.188.0/24 X-Spam-Status: No, score=-3.9 required=3.0 tests=AWL,BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,SPF_PASS shortcircuit=no autolearn=ham autolearn_force=no version=3.4.2 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id 9A8771F8C6 for ; Mon, 2 Aug 2021 10:09:18 +0000 (UTC) Received: from localhost ([::1]:34570 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mAUsn-0002Z2-BQ for normalperson@yhbt.net; Mon, 02 Aug 2021 06:09:17 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33754) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mAUsk-0002WB-0Q for bug-gnulib@gnu.org; Mon, 02 Aug 2021 06:09:14 -0400 Received: from uggla.sjd.se ([2001:9b1:8633::107]:50028) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mAUsh-0004nT-Pg for bug-gnulib@gnu.org; Mon, 02 Aug 2021 06:09:13 -0400 DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=ed2101; h=Content-Transfer-Encoding:MIME-Version: Content-Type:References:In-Reply-To:Date:To:From:Subject:Message-ID:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=87AxaftV5k2B4m1Zs3wE1W2A8M8ctnpQIQbCw7KuUJA=; t=1627898948; x=1629108548; b=bqr0/TeWmtObtl9WG90biI/wsEYjI3og3C4hy6uJFV/P7mY/3HUyLItkupDe+a9IDnXoIJbBS/ 1Yb6t+3TpeBg==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=rsa2101; h=Content-Transfer-Encoding:MIME-Version: Content-Type:References:In-Reply-To:Date:To:From:Subject:Message-ID:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=87AxaftV5k2B4m1Zs3wE1W2A8M8ctnpQIQbCw7KuUJA=; t=1627898948; x=1629108548; b=ETwDgtVWavx5dopQCBV5qp5/CaVU8hXX4brW1E3VEqfgANkTdzLp7zY4NdyNCac2v3BVA6wOjq 6wYjArFBVr5rpzglRMoy75HIju0MIVCzeuZQz2jSu5cva4Pc7bze6A4vEYSOCjxAOFsdw+ymeF94y uuQ2/XwoarSJShSfYQf3eUanI3G29IZa/VlUrXYF0+t6t6z+V483HSNofpkbnwoDL8I8HRa+JEhZk P5XcesmAut0F+P2vyUPPPry7qf/9DgcEEMRph2Lsx9wGMBTNnHONGxhi6YrKvyIey9p/CsW4Poc/m x9jqxqh+zghT1MMqA5pz2BIEnmqH1sY4R8OzxP3K4sx7MEGsp431mmJ6UOvqrSq4NANf3bETQ1EUW Ne+y/JeU2C2OzjOq16FIOGQ1LlwA8rzwlk9fxpgQgyyJ2QaYckYWYtkglX2/NdQKMc/uU+haBQ ; Received: from [2001:9b1:41ac:ff00:4c49:47cc:4edb:e22b] (port=60398) by uggla.sjd.se with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mAUsc-0001q2-BW; Mon, 02 Aug 2021 10:09:06 +0000 Message-ID: Subject: Re: announce-gen and OpenPGP key servers To: Bernhard Voelker , bug-gnulib@gnu.org Date: Mon, 02 Aug 2021 12:09:06 +0200 In-Reply-To: <07a9c597-5c07-ec61-7d3c-32b503063be2@bernhard-voelker.de> References: <87y29sf65o.fsf@latte.josefsson.org> <07a9c597-5c07-ec61-7d3c-32b503063be2@bernhard-voelker.de> Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.38.3-1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2001:9b1:8633::107; envelope-from=simon@josefsson.org; helo=uggla.sjd.se X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: bug-gnulib@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Gnulib discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnulib-bounces+normalperson=yhbt.net@gnu.org Sender: "bug-gnulib" Reply-to: Simon Josefsson From: Simon Josefsson via Gnulib discussion list sön 2021-08-01 klockan 17:47 +0200 skrev Bernhard Voelker: > On 7/27/21 11:38 AM, Simon Josefsson via Gnulib discussion list > wrote: > > Let's discuss and see what we can do. > Isn't this what the "release GPG keys" on Savannah are for? > > Each project maintainer can set them up correctly under "Edit public > info": >   " > https://savannah.gnu.org/project/admin/editgroupinfo.php?group=${PROJECT} > " > > The result can be downloaded by users for verification: >   " > https://savannah.gnu.org/project/release-gpgkeys.php?group=${PROJECT}&download=1 > " > e.g. coreutils': >   " > https://savannah.gnu.org/project/release-gpgkeys.php?group=coreutils&download=1 > " > > Downstream sometimes use them, e.g. SUSE and openSUSE are verifying > the keys on their Open Build Service. Right, thanks for pointing that out. It can be used in some situations. One concern is that the set of keys trusted for uploads to ftp.gnu.org is a a different set of keys, and not all GNU projects use Savannah. /Simon