Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.maint.python > #16317

Re: python devs are planning to stop signing with gpg

Path csiph.com!tncsrv06.tnetconsulting.net!newsfeed.endofthelinebbs.com!news.corradoroberto.it!gothmog.csi.it!bofh.it!news.nic.it!robomod
From Jeremy Stanley <fungi@yuggoth.org>
Newsgroups linux.debian.maint.python
Subject Re: python devs are planning to stop signing with gpg
Date Thu, 03 Oct 2024 22:30:01 +0200
Message-ID <JtACt-gISn-5@gated-at.bofh.it> (permalink)
References <Jswrf-g28h-7@gated-at.bofh.it> <JswUh-g2I4-11@gated-at.bofh.it> <JswUh-g2I4-9@gated-at.bofh.it> <JtvW9-gG49-3@gated-at.bofh.it> <JtyKl-gHL8-7@gated-at.bofh.it>
X-Mailbox-Line From debian-python-request@lists.debian.org Thu Oct 3 20:22:07 2024
Old-Return-Path <fungi@yuggoth.org>
X-Amavis-Spam-Status No, score=-12 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no
X-Policyd-Weight using cached result; rate: -4.6
X-Greylist delayed 1528 seconds by postgrey-1.36 at bendel; Thu, 03 Oct 2024 20:21:54 UTC
MIME-Version 1.0
Content-Type multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="w6rhqowpvfsthbfi"
Content-Disposition inline
User-Agent NeoMutt/20170113 (1.7.2)
X-Sa-Exim-Connect-IP 2001:4802:7801:102:be76:4eff:fe20:63e0
X-Sa-Exim-Rcpt-To debian-python@lists.debian.org
X-Sa-Exim-Mail-From fungi@yuggoth.org
X-Sa-Exim-Scanned No (on azathoth.yuggoth.org); SAEximRunCond expanded to false
X-Mailing-List <debian-python@lists.debian.org> archive/latest/22378
List-ID <debian-python.lists.debian.org>
List-URL <https://lists.debian.org/debian-python/>
List-Archive https://lists.debian.org/msgid-search/20241003195620.2rnlim4ju75i2wsv@yuggoth.org
Approved robomod@news.nic.it
Lines 40
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Thu, 3 Oct 2024 19:56:21 +0000
X-Original-Message-ID <20241003195620.2rnlim4ju75i2wsv@yuggoth.org>
X-Original-References <14198883.O9o76ZdvQC@galatea> <87bk04sslp.fsf@debian.org> <4017015.ElGaqSPkdT@galatea> <20241003152912.7wwrsuxezwg3kaoj@satie.tumbleweed.org.za> <c93cb2bd-ad10-439e-819b-0007bf60fadc@debian.org>
Xref csiph.com linux.debian.maint.python:16317

Show key headers only | View raw


[Multipart message — attachments visible in raw view] - view raw

On 2024-10-03 14:22:09 -0400 (-0400), Louis-Philippe Véronneau wrote:
[...]
> In general, having viable alternatives to OpenPGP would open an
> interesting door for the general Debian ecosystem...

Agreed, OpenBSD projects have been signing release artifacts with
their signify tool for a while, which is (slowly) growing in
popularity too: https://packages.debian.org/signify
-- 
Jeremy Stanley

Back to linux.debian.maint.python | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

python devs are planning to stop signing with gpg Salvo Tomaselli <ltworf@debian.org> - 2024-09-30 23:50 +0200
  Re: python devs are planning to stop signing with gpg Salvo Tomaselli <ltworf@debian.org> - 2024-10-01 00:20 +0200
    Re: python devs are planning to stop signing with gpg Brian May <bam@debian.org> - 2024-10-01 02:00 +0200
    Re: python devs are planning to stop signing with gpg Stefano Rivera <stefanor@debian.org> - 2024-10-03 17:30 +0200
      Re: python devs are planning to stop signing with gpg Louis-Philippe Véronneau <pollo@debian.org> - 2024-10-03 20:30 +0200
        Re: python devs are planning to stop signing with gpg Jeremy Stanley <fungi@yuggoth.org> - 2024-10-03 22:30 +0200
        Alternative signature mechanisms for upstream source verification Stefano Rivera <stefanor@debian.org> - 2024-10-04 20:30 +0200
          Re: Alternative signature mechanisms for upstream source  verification Mathias Behrle <mbehrle@debian.org> - 2024-10-04 21:30 +0200
          Re: Alternative signature mechanisms for upstream source verification Guillem Jover <guillem@debian.org> - 2024-10-05 03:40 +0200
            Re: Alternative signature mechanisms for upstream source verification Stefano Rivera <stefanor@debian.org> - 2024-10-05 06:10 +0200
            Re: Alternative signature mechanisms for upstream source verification Martin <debacle@debian.org> - 2024-10-05 10:30 +0200
          Re: Alternative signature mechanisms for upstream source verification Simon Josefsson <simon@josefsson.org> - 2024-10-05 12:40 +0200
  Re: python devs are planning to stop signing with gpg Brian May <bam@debian.org> - 2024-10-01 00:30 +0200

csiph-web