From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Julien Danjou Newsgroups: gmane.emacs.devel Subject: Re: ELPA update Date: Wed, 28 Sep 2011 16:00:04 +0200 Message-ID: <878vp8ahsr.fsf@keller.adm.naquadah.org> References: <87y5xavz8i.fsf@keller.adm.naquadah.org> <87fwji2d8o.fsf@stupidchicken.com> <87ehz1ds54.fsf@keller.adm.naquadah.org> <87wrcsrczf.fsf@lifelogs.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" X-Trace: dough.gmane.org 1317218420 11412 80.91.229.12 (28 Sep 2011 14:00:20 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Wed, 28 Sep 2011 14:00:20 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Sep 28 16:00:17 2011 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1R8ugK-00073j-Bo for ged-emacs-devel@m.gmane.org; Wed, 28 Sep 2011 16:00:16 +0200 Original-Received: from localhost ([::1]:34462 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R8ugJ-0000A8-Ni for ged-emacs-devel@m.gmane.org; Wed, 28 Sep 2011 10:00:15 -0400 Original-Received: from eggs.gnu.org ([140.186.70.92]:38628) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R8ugH-00009p-Ge for emacs-devel@gnu.org; Wed, 28 Sep 2011 10:00:14 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1R8ugB-0004op-VN for emacs-devel@gnu.org; Wed, 28 Sep 2011 10:00:13 -0400 Original-Received: from prometheus.naquadah.org ([212.85.154.174]:33456 helo=mx1.naquadah.org) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R8ugB-0004n7-Nl for emacs-devel@gnu.org; Wed, 28 Sep 2011 10:00:07 -0400 Original-Received: from keller.adm.naquadah.org (AMontsouris-651-1-106-83.w83-202.abo.wanadoo.fr [83.202.161.83]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mx1.naquadah.org (Postfix) with ESMTPSA id 145065C13E for ; Wed, 28 Sep 2011 16:00:06 +0200 (CEST) Mail-Followup-To: emacs-devel@gnu.org In-Reply-To: <87wrcsrczf.fsf@lifelogs.com> (Ted Zlatanov's message of "Wed, 28 Sep 2011 08:52:04 -0500") User-Agent: Gnus/5.110018 (No Gnus v0.18) Emacs/24.0.90 (gnu/linux) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 212.85.154.174 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:144443 Archived-At: --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Wed, Sep 28 2011, Ted Zlatanov wrote: > To that end it would also be nice if we asked committers to sign their > contributions with their private GPG key, but I don't know if Bazaar > supports that. If they did, we could have a list of approved public GPG > keys for any given package and contributions signed with those could be > automatically approved. This is just a proposal though, I don't know > the best way to do it. I though people having commit access to ELPA were already trusted, since they got their write access SSH authentified? > Most of us don't know how to run a package repository, so maybe we > should look at the Debian maintainers' process or ask them if we don't > have the local expertise. Well, there's no manual review of packages already present in the archive at Debian. Only new packages got reviewed (for licensing issue mainly). =2D-=20 Julien Danjou --=-=-= Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBAgAGBQJOgyhlAAoJEGEbqVCLeKXCmzMP/RSISmDARVqyy3sgl1x41fvL D/2R8Nx7Nn44M9AatGogt3zN188c79SUk7Ruzh4Gq2tTvUYw/dLEHVUTvGTDNSW9 MFiERpIsmdmHFQKH7+YZ6U42IVFaNa0e8bOfHld/NbpwhkPFKCcq830JxQVaSP1u 8gGG/qjjiJLme+azAXw6s0yFnIRsit68mx3aLar0kwZqToj70zbDFheV6dMYxioT THatg+tBT1Dlbs3OcGo/VqIUY4jWMEIhdU8dfWd5TDE5DxLX5EQRewQZH9mtzj99 xZl5RSIPOFaet1pkxtDobRWdfgIQO7x68vm6VPXpAbfCb31gB0rno51Ji1mMgCi5 59aS+1ryRPzeHq08zQ6EP94+6Wxy04rjZj8M94kjF1ge02xvRPISRlDSamLfyx0c Afy7a63786GMvbg5bh7z1mbL2c5+f73f2XDQkhaXfKoEphbp3MhynNljwVfyHgR5 tV+pN2EvZiy1Zm3auWS7YY803gFvVpnC3C8WSbCZJCmXkBQagerZoSKpsNM6ih6C ajYugarvniv7KHTRXLItoe7C2u1iKqKevOjR1MoYnsb3CaEFZSmEc6Rf3N5xhcwl 6vgn9jxZNBeUaBa1IDgEH9gP6nVC1jsm8wP8eWHcqnFkhvy57ytzjaI3gOf+slSr XiWWDoIFGxoqDiTiuXU7 =MpP1 -----END PGP SIGNATURE----- --=-=-=--