Path: csiph.com!news.mixmin.net!news2.arglkargh.de!news.karotte.org!fu-berlin.de!bofh.it!news.nic.it!robomod From: =?UTF-8?Q?Louis-Philippe_V=C3=A9ronneau?= Newsgroups: linux.debian.maint.python Subject: Re: python devs are planning to stop signing with gpg Date: Thu, 03 Oct 2024 20:30:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Thu Oct 3 18:22:28 2024 Old-Return-Path: X-Amavis-Spam-Status: No, score=-108.01 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, BODY_8BITS=1.5, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, RCVD_IN_DNSWL_MED=-2.3, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US Autocrypt: addr=pollo@debian.org; keydata= xjMEYEPdjBYJKwYBBAHaRw8BAQdA5yh8SOHhcvKeX/A4rv0/JTCL8Kgnnwy4/okKh1Htbs3N LExvdWlzLVBoaWxpcHBlIFbDqXJvbm5lYXUgPHBvbGxvQGRlYmlhbi5vcmc+wpYEExYKAD4C GwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AWIQT2TWHTIfPLSJFWdT3h5UV8i61BEwUCZb/f iAUJDuIDfAAKCRDh5UV8i61BEzdaAP0cGJp8CpkywzefhdaJjfK5/uAQLRg5Bk6yCWnyR8B4 wQEAxA4C39PJPsosgOVBMdfkzCPhGVynYBnujOyEcksX1w/OOARgQ+DlEgorBgEEAZdVAQUB AQdAgRLbDfS/6GLXd15qI9zHso9UwJQgDbme7pvL1Z9rkG4DAQgHwn4EGBYKACYCGwwWIQT2 TWHTIfPLSJFWdT3h5UV8i61BEwUCZb/fsAUJDuIASgAKCRDh5UV8i61BEwYaAQDhvbQQqmTD F/fdodzfiY45IWYckb9rCvKaVnfP6DOY9QEA/eeaEWmOq2NpOYpBesVjBZCLe8jKv1WPMfLL YOfDIAc= Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Debian-User: pollo X-Mailing-List: archive/latest/22377 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/c93cb2bd-ad10-439e-819b-0007bf60fadc@debian.org Approved: robomod@news.nic.it Lines: 17 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Thu, 3 Oct 2024 14:22:09 -0400 X-Original-Message-ID: X-Original-References: <14198883.O9o76ZdvQC@galatea> <87bk04sslp.fsf@debian.org> <4017015.ElGaqSPkdT@galatea> <20241003152912.7wwrsuxezwg3kaoj@satie.tumbleweed.org.za> Xref: csiph.com linux.debian.maint.python:16316 On 2024-10-03 11:29, Stefano Rivera wrote: > We should figure out what it would take to support sigstore in Debian > source packages, assuming there is more adoption. Having that support in uscan and the rest of our tooling would be amazing. That would let us support things like SSH signatures, like I encountered in #1023140. In general, having viable alternatives to OpenPGP would open an interesting door for the general Debian ecosystem... -- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ Louis-Philippe Véronneau ⢿⡄⠘⠷⠚⠋ pollo@debian.org / veronneau.org ⠈⠳⣄