From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id APgFG5pelmJnIAAAbAwnHQ (envelope-from ) for ; Tue, 31 May 2022 20:29:46 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id 8FkEG5pelmIzDAAA9RJhRA (envelope-from ) for ; Tue, 31 May 2022 20:29:46 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 16E113E3F0 for ; Tue, 31 May 2022 20:29:46 +0200 (CEST) Received: from localhost ([::1]:57370 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nw6ci-0002kQ-OE for larch@yhetil.org; Tue, 31 May 2022 14:29:44 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45282) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nw6at-0001mk-6D for guix-devel@gnu.org; Tue, 31 May 2022 14:27:52 -0400 Received: from mail-wm1-x32c.google.com ([2a00:1450:4864:20::32c]:38434) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nw6ar-0007Fb-F9; Tue, 31 May 2022 14:27:50 -0400 Received: by mail-wm1-x32c.google.com with SMTP id f23-20020a7bcc17000000b003972dda143eso1717075wmh.3; Tue, 31 May 2022 11:27:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:in-reply-to:references:date:message-id :mime-version:content-transfer-encoding; bh=Tc5DsNAFIEyl+8XBp47qt92XYfJVZ+RYkF3gc8UfkLw=; b=PI2BPzTbZc/xqtCgkqd8dQfImEVvOAjXsDWLlr4K9IJuNx1yEHJqlow1uCiaKlHnze B7pW04oNg+snBZyv6+8qfdRNBtBlpGJa9WUOD+KQYyjEocipe8EUOlBjYtEbGFvIutli vwvEmzHXAcH0crZDQdJ+98FytE86PD+3nE7elvdtd0++beHBwjJ75mwSBU/JNSbPruzt pDYEvUovPv2zuoG4CkiU+wsjktJ+0acnjtQtBUmlDIsnSlyBcsSOYsxGQs9lriPH0J+s /3UdZYda7bJOj4eLctsRg0IQTXkNcv380usAIFVV0+dnGUaLN2ZCyfJ1TFWfDlg0E2Ly iOQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=Tc5DsNAFIEyl+8XBp47qt92XYfJVZ+RYkF3gc8UfkLw=; b=ggRBdcjDzdvXCIUjDpTuKU/i5pmB4V/fHf3aeLJ/LY3LZzU+gTqzdXw5aTgWEkO8qp lmU21gXPzFlO9IHD6XLbmnxHCRFHaHZ6H1SKYm7v1a9Gg/JkZVRqvYUs4ySkrZ9+c0RK 4tdUxlf9V50BfO14aso2Mhyj7CYCTznPCyqAKxM1LK7YuQprmg71beuQgKY+H2/phIHL E3mvh42vwBE4rwF82r/ACaePfZB/sMRoDZ3y027ODX7FJISQiwYjawIeZbU6ind671nv DPXP/23j5P0AlCEAVUCvw1sOGHxAE1H/aGJL2eQymxOWszaWEWJ43nOnEBnJ++hSwjmV av+g== X-Gm-Message-State: AOAM533AQsSVLgxxwof+Xiqo4OESOIsGQoThjglMYgXXUMpVKvH9GZWx QoduXktdQg+XCR+NhrxNXB7F2PoEigw= X-Google-Smtp-Source: ABdhPJwOvGraS4UVa4TkjLd+pFuS6yRJ711gV/O+kcbCfhOhvaoE5d8QMEGt8Rfx9mjS0sg+pXG29w== X-Received: by 2002:a05:600c:1d0f:b0:397:4b61:8784 with SMTP id l15-20020a05600c1d0f00b003974b618784mr24624200wms.103.1654021666735; Tue, 31 May 2022 11:27:46 -0700 (PDT) Received: from pfiuh07 ([193.48.40.241]) by smtp.gmail.com with ESMTPSA id j26-20020a05600c1c1a00b003973e27b789sm3939848wms.27.2022.05.31.11.27.45 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 31 May 2022 11:27:46 -0700 (PDT) From: zimoun To: Vagrant Cascadian , Ludovic =?utf-8?Q?Court=C3=A8s?= , Maxime Devos Cc: Tanguy LE CARROUR , guix-devel@gnu.org Subject: Re: Finding a =?utf-8?B?4oCcZ29vZOKAnQ==?= OpenPGP key server In-Reply-To: <878rqhd9i6.fsf@contorta> References: <164966505518.14431.3309259068866383863@localhost> <87tuaqw36n.fsf@gnu.org> <87czfv2fvw.fsf@gnu.org> <878rqhd9i6.fsf@contorta> Date: Tue, 31 May 2022 19:44:33 +0200 Message-ID: <8735gpbnr2.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=2a00:1450:4864:20::32c; envelope-from=zimon.toutoune@gmail.com; helo=mail-wm1-x32c.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1654021786; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=Tc5DsNAFIEyl+8XBp47qt92XYfJVZ+RYkF3gc8UfkLw=; b=NYG+xryx0d03cBfyvaTAXZjj3pg6B93FRNhRs2H5Vft8IzD3ZSwy/78dF2b1ecNzh18Y6W r4M0anc/+zCgyQlcvV07I6d9eib3IXBimB9GM9Q0vcGDjEePTqKRmwBt6xs5EW4o7qG9or Of4qxzdknJxKJyne33+GEfE/EjtFZxhgtFDiGqgKuvzsStOI71X6PCU0bVs32K2DY+bZwm OnWb+IJuJZtTo3i4A/1SJNNGdMnfZp8Hi4/+88x+r8NVamqIa0KODCbvNd6EloZvpgqTNY e5XLn4T1Ps8HmFFBE4KNveyEMSjsYd1ifYbjf4jQ69HN7fde3CJqsYxAgFIAow== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1654021786; a=rsa-sha256; cv=none; b=YqHmaqo2/F+eIN/8j5w7ahSNYcLQjb5iuSB7W2ztSLXTJ8AnBnl27R2VcFrAcEsK9RrkGN 00YSXliJMcCvX+K7sYxDjMg7mhveZ6pWk+hbeMu1G0P5dEDHtl7cv/LukUxmf9w4vkWuKI izkeC9srFB0BaUw+8hj2ugr2sHx9qqhd9RPLTOvRMSrym1vxVb1jht8U7XddIWdGIPT8m5 3MVMOe892IVH3bL82TDRjHJuRjVi+nSUZij8VHDBiwLS4OmDlCYyWvp2iixw+oPaNRd9JX d8bmC9HGzoFyH00KxHvXAf83cQBw7r54SEItKd/Gn8NfFmB+RwYecQJsAZMpEg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=PI2BPzTb; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -9.34 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=PI2BPzTb; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 16E113E3F0 X-Spam-Score: -9.34 X-Migadu-Scanner: scn0.migadu.com X-TUID: cSjxICQCMlmg Hi, On mar., 31 mai 2022 at 08:09, Vagrant Cascadian wrote: > Or keep some keyrings in a git repo, if we want to keep the keys > somewhat restricted to committers... a major problem of the public > keyserver network is/was the ability for anyone to update or add any key > for anybody. > > We've already got the keyring branch in guix.git, maybe adding an > upstream-keys branch wouldn't be madness? Or a separate git > repository. And then you could get it archived at software heritage or > archive.org or whatever trivially. I have not closely followed all the thread. Just to mention that the upstream-keys branch or separate Git repository using Software Heritage or archive.org as backup require some tests for complete robustness. I have in mind some examples where it is not =E2=80=9Ctrivial=E2=80=9D to g= et back from SWH; because their cooking vault is slow, because the repo is big or complex, etc. That=E2=80=99s said, I agree that Git seems the easiest for preserving keyr= ings. Cheers, simon