From mboxrd@z Thu Jan  1 00:00:00 1970
From: Brandon Invergo <brandon@invergo.net>
Subject: Re: Checking signatures on source tarballs
Date: Mon, 12 Oct 2015 22:26:57 +0100
Message-ID: <1444685217.11509.2.camel@invergo.net>
References: <1443791046-1015-1-git-send-email-alezost@gmail.com>
	<1443791046-1015-3-git-send-email-alezost@gmail.com>
	<87d1wvadw2.fsf@gnu.org> <87bnceah2e.fsf@gmail.com>
	<87r3la6077.fsf@gnu.org> <87eghalc7s.fsf@gmail.com>
	<87wpv1tils.fsf@gnu.org> <87a8rwf2vl.fsf@gmail.com>
	<8737xntorr.fsf_-_@netris.org> <87k2qy7uj7.fsf@gnu.org>
	<87io6iojmf.fsf@netris.org> <87bnca2y59.fsf@gnu.org>
	<87y4fdtwi1.fsf@inria.fr> <1444639029.2637.49.camel@invergo.net>
	<1444641491.2637.67.camel@invergo.net> <87si5gavpo.fsf@gnu.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha256";
	protocol="application/pgp-signature"; boundary="=-S9t/2eowdxd2IMx8u/sZ"
Return-path: <bug-gsrc-bounces+gcggb-bug-gsrc=m.gmane.org@gnu.org>
In-Reply-To: <87si5gavpo.fsf@gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/bug-gsrc>,
	<mailto:bug-gsrc-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/bug-gsrc>
List-Post: <mailto:bug-gsrc@gnu.org>
List-Help: <mailto:bug-gsrc-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/bug-gsrc>,
	<mailto:bug-gsrc-request@gnu.org?subject=subscribe>
Errors-To: bug-gsrc-bounces+gcggb-bug-gsrc=m.gmane.org@gnu.org
Sender: bug-gsrc-bounces+gcggb-bug-gsrc=m.gmane.org@gnu.org
To: Ludovic =?ISO-8859-1?Q?Court=E8s?= <ludo@gnu.org>
Cc: guix-devel@gnu.org, Mark H Weaver <mhw@netris.org>, Alex Kost <alezost@gmail.com>, bug-gsrc@gnu.org
List-Id: guix-devel.gnu.org


--=-S9t/2eowdxd2IMx8u/sZ
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, 2015-10-12 at 18:38 +0200, Ludovic Court=C3=A8s wrote:

> However, this package =E2=86=92 keys mapping necessarily exists somewhere=
.=C2=A0=C2=A0I
> think we should ask the FSF to publish it and provide a way to
> authenticate it.
>=20
> WDYT?

If they would be willing to publish it, I think it would be a very good
idea.

-brandon

--=-S9t/2eowdxd2IMx8u/sZ
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAABCAAGBQJWHCWhAAoJEARu3ubrerdN4bAH/2r2etBFspDIXTIw2QDKOSnW
yP/QSfMCeuxxvbYs5tssMljH/c+w5zl8dkpErmRauMYYwdFUDpdhrtvgrtQyP9wl
pxTaBvM5JeYpQqtvGjDYcNqXpYPVSjFjbZeiOQSvwxaNA7DmsnS9xompMcmHSar2
pUS93qDIX+DoVhA0rY+rGUqBvJDtsxASVBmRvpmxXMtLBLze/bdn8i7LfAf0numd
3DXutF/mvgHkyTgV7kOKMgwh8wMuYnx3QY6hN1JFNLxZ2FI3UvdhTDLY28R0qpfJ
OJwdx3TdfMk7KMANhpV4TRvMPXed1sqd6FGi0zEHQYADh6qEG/HY5Q5Gr243A5I=
=6jcx
-----END PGP SIGNATURE-----

--=-S9t/2eowdxd2IMx8u/sZ--