Groups > linux.debian.devel > #119524

Re: Does d/watch work for commits signed via ssh?

From	Yadd <yadd@debian.org>
Newsgroups	linux.debian.devel
Subject	Re: Does d/watch work for commits signed via ssh?
Date	2025-11-10 06:50 +0100
Message-ID	<LPsWR-bPOm-5@gated-at.bofh.it> (permalink)
References	<LON7k-bneB-9@gated-at.bofh.it> <LPkwh-bJZv-7@gated-at.bofh.it> <LPliF-bKya-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Le 09/11/2025 à 22:31, Simon Josefsson a écrit :
> Yadd <yadd@debian.org> writes:
> 
>> SSH signatures are more of a gimmick than a true electronic signature;
>> I don't see the point of putting them on the same level as a GPG
>> signature in uscan.
> 
> What do you mean by gimmick?  SSH signature support seems to be on-par
> with PGP in plenty of eco-systems including github, gitlab etc.
> 
> /Simon

No trust system or public database, no expiration date, no revocation 
system, same key used for auth and sig which is a by-design 
vulnerability,...

Back to linux.debian.devel | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Does d/watch work for commits signed via ssh? Nilesh Patra <nilesh@debian.org> - 2025-11-08 10:10 +0100
  Re: Does d/watch work for commits signed via ssh? Yadd <yadd@debian.org> - 2025-11-09 21:50 +0100
    Re: Does d/watch work for commits signed via ssh? Simon Josefsson <simon@josefsson.org> - 2025-11-09 22:40 +0100
      Re: Does d/watch work for commits signed via ssh? Yadd <yadd@debian.org> - 2025-11-10 06:50 +0100
        Re: Does d/watch work for commits signed via ssh? Simon Josefsson <simon@josefsson.org> - 2025-11-10 11:20 +0100
          Re: Does d/watch work for commits signed via ssh? Simon Richter <sjr@debian.org> - 2025-11-10 14:40 +0100
    Re: Does d/watch work for commits signed via ssh? Salvo Tomaselli <tiposchi@tiscali.it> - 2025-11-09 23:20 +0100

csiph-web