Path: csiph.com!tncsrv06.tnetconsulting.net!newsfeed.endofthelinebbs.com!news.corradoroberto.it!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Jeremy Stanley Newsgroups: linux.debian.maint.python Subject: Re: python devs are planning to stop signing with gpg Date: Thu, 03 Oct 2024 22:30:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Thu Oct 3 20:22:07 2024 Old-Return-Path: X-Amavis-Spam-Status: No, score=-12 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -4.6 X-Greylist: delayed 1528 seconds by postgrey-1.36 at bendel; Thu, 03 Oct 2024 20:21:54 UTC MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="w6rhqowpvfsthbfi" Content-Disposition: inline User-Agent: NeoMutt/20170113 (1.7.2) X-Sa-Exim-Connect-IP: 2001:4802:7801:102:be76:4eff:fe20:63e0 X-Sa-Exim-Rcpt-To: debian-python@lists.debian.org X-Sa-Exim-Mail-From: fungi@yuggoth.org X-Sa-Exim-Scanned: No (on azathoth.yuggoth.org); SAEximRunCond expanded to false X-Mailing-List: archive/latest/22378 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/20241003195620.2rnlim4ju75i2wsv@yuggoth.org Approved: robomod@news.nic.it Lines: 40 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Thu, 3 Oct 2024 19:56:21 +0000 X-Original-Message-ID: <20241003195620.2rnlim4ju75i2wsv@yuggoth.org> X-Original-References: <14198883.O9o76ZdvQC@galatea> <87bk04sslp.fsf@debian.org> <4017015.ElGaqSPkdT@galatea> <20241003152912.7wwrsuxezwg3kaoj@satie.tumbleweed.org.za> Xref: csiph.com linux.debian.maint.python:16317 --w6rhqowpvfsthbfi Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2024-10-03 14:22:09 -0400 (-0400), Louis-Philippe V=C3=A9ronneau wrote: [...] > In general, having viable alternatives to OpenPGP would open an > interesting door for the general Debian ecosystem... Agreed, OpenBSD projects have been signing release artifacts with their signify tool for a while, which is (slowly) growing in popularity too: https://packages.debian.org/signify --=20 Jeremy Stanley --w6rhqowpvfsthbfi Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAmb+9t9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk3 QUU0OTZGQzAyREVDOUZDMzUzQjJFNzQ4Rjk5NjExNDM0OTU4MjkACgkQSPmWEUNJ WCmG3A//ZRGCnykAYe7UPqdtNKLqNgcoTnvaaSnu6eE2PEbo0Qt0Ccf3st0xDO/O I6NcIW6H7C3je9U/cgXntdkV0EyATDbk83QcmKd77Jz6OK6hLehtIv9Sdg0I33/h y/D2fb8MhWAUmsMbntIXcDHlovlMF6Owmwh4HjAV8ycfyrczUXmBpsb2WFQ4m2wy kWxsbSUPJ/ZK8INtXqGFXtLXimrfn6+HdkyVYM3G7hTd9xygSaA7hRQolpKnPiv4 Ae1ZvEtkHNFbyhInGwVw0DlhwrygX0Tpc19zdBF7kDehRVNLoGGXUyWfEVZtQw3X gWrerm22sBKhUI4lpLdMFhyWmmcux1ij5XdIzHCFc7vSInY5eWzkkXQvWT+jJsk0 KUbEzrWl26iGxmdcvjREXejWR8pL93pI3ZVChAUMU1ukGo1NEvl9YUyYB+u5Gypc j9h/if3nK1mzQobAH1YdsFheTboxgGbDM7luC8dNsYdXYXLTqsbGj2uIHfC+6Lv4 dcup1NbjUeGtNzeia5I8W6eujQFqe9KMEVkmxX7z3ACqJTHxcCAjlThrHTAwol7C uaYe4/w6IVbLa1f7pHOTuxFzphVjK7BdH6lq1ZItOfP/NIDuJiT6uiV8MDBG1oTm YEB6TcqSLniqCMYreEZsy+Myq0TW6K0WLzAeVr4pkm44F64Jlhs= =wWIv -----END PGP SIGNATURE----- --w6rhqowpvfsthbfi--