From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: Whose keys go on elpa/gnupg/pubring.gpg? Date: Thu, 08 Jan 2015 00:01:25 -0500 Message-ID: References: NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1420693342 28110 80.91.229.3 (8 Jan 2015 05:02:22 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 8 Jan 2015 05:02:22 +0000 (UTC) Cc: emacs-devel@gnu.org To: Kelly Dean Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Jan 08 06:02:16 2015 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Y95E7-0002dP-Tj for ged-emacs-devel@m.gmane.org; Thu, 08 Jan 2015 06:01:44 +0100 Original-Received: from localhost ([::1]:44074 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Y95E7-0005wj-F2 for ged-emacs-devel@m.gmane.org; Thu, 08 Jan 2015 00:01:43 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:37860) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Y95Du-0005vm-Dz for emacs-devel@gnu.org; Thu, 08 Jan 2015 00:01:31 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Y95Dp-0007h4-S1 for emacs-devel@gnu.org; Thu, 08 Jan 2015 00:01:30 -0500 Original-Received: from ironport2-out.teksavvy.com ([206.248.154.181]:4709) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Y95Dp-0007h0-Nw for emacs-devel@gnu.org; Thu, 08 Jan 2015 00:01:25 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AnQPAOwQflS4rwoL/2dsb2JhbABbgwdSWYI1hVq+fIYhBAICgSQXAQEBAQEBfIQDAQEDAVYjBQsLNBIUGA0kiEoJ1lkBAQEHAQEBAR6QbweESAWLAYoeiE2RQ4F4hBkhMIJHAQEB X-IPAS-Result: AnQPAOwQflS4rwoL/2dsb2JhbABbgwdSWYI1hVq+fIYhBAICgSQXAQEBAQEBfIQDAQEDAVYjBQsLNBIUGA0kiEoJ1lkBAQEHAQEBAR6QbweESAWLAYoeiE2RQ4F4hBkhMIJHAQEB X-IronPort-AV: E=Sophos;i="5.07,502,1413259200"; d="scan'208";a="107062046" Original-Received: from 184-175-10-11.dsl.teksavvy.com (HELO ceviche.home) ([184.175.10.11]) by ironport2-out.teksavvy.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 08 Jan 2015 00:01:25 -0500 Original-Received: by ceviche.home (Postfix, from userid 20848) id 06A24660D3; Thu, 8 Jan 2015 00:01:25 -0500 (EST) In-Reply-To: (Kelly Dean's message of "Thu, 08 Jan 2015 03:36:40 +0000") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 206.248.154.181 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:181047 Archived-At: > In that case, where do individual package maintainers' keys go? Nowhere: the signatures only certify that this is the file that was created on elpa.gnu.org. Adding package maintainer's signatures would be a very different enterprise, which we haven't attacked (yet?). Stefan