From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id WNp8KEIRgWds4QAA62LTzQ:P1 (envelope-from ) for ; Fri, 10 Jan 2025 12:23:30 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id WNp8KEIRgWds4QAA62LTzQ (envelope-from ) for ; Fri, 10 Jan 2025 13:23:30 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=tobias.gr header.s=2018 header.b=XFBWe0Pn; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=reject) header.from=tobias.gr ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1736511810; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature:autocrypt:autocrypt; bh=oCC+gfqNyphXnWAq2+OoudASWDeK+R6ZDcfZFS7+cfI=; b=nR3yArUY66esbxjlDJfUxWDKLrCnCkyUTwA7gPPsPAkJWOoytsFjNsOPItENTWZQ+/XlwE E5dl3MaGeMDIR0hCb/tVKjHUxLIsnyN3X89vi3fQVpwRyW879jEEthIFmm3+eKMeNKqpro QmJ+/tacce9/RIIRzIGUe4yHrfZvqxJYTno7bZy54CdKr/cVzhyj2Iflfk1MU6/RXu30TJ ul5Zbm9sh8kjnuqrH+WPbSIeQ7SQw8IpctHh1Y7nA3kzQ7OtXaUzAXxohBipThWoznuJV5 7Y5hGG390GEWpljMXQ0Qjt6WSmg5HHIpTkC1yWO7qWHOKNHKgxNpdH3B//CYzQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=tobias.gr header.s=2018 header.b=XFBWe0Pn; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=reject) header.from=tobias.gr ARC-Seal: i=1; s=key1; d=yhetil.org; t=1736511810; a=rsa-sha256; cv=none; b=gGFgMXH4KnEREQQnENIlKAQMYa009ZI+2ggbpLsLWP0S+g9BMl1A0kI0tJE6ZgSoCqpyYL DE804ZUSCK3c5VMT/86Le9RqNfFiBJ4xtdIO0Z5BHv65vMphJKpRuZ0BZ/6fA7hWUpOUU+ V1odXLaHCNVVObuot/iOhYZugormAsahyjr4CMqybO2saKjNRHxu8WCfpoJ4pny1kXh3FO gsJnHBidbUYEBpM0bmdx+quMDpPGkrd1laahmsS+LIA/TmaDLujYWFyaoV1Upi7RYSBN3N WyZ/qojw6botg8g+RIv1xN+j2DPmvv+zb5mz3ZjwP2Jj7lYZgThNjjNIsgIW8A== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 648706FC0 for ; Fri, 10 Jan 2025 13:23:30 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tWE2d-0000Gr-9j; Fri, 10 Jan 2025 07:23:07 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tWE2Z-0008S6-KJ for help-guix@gnu.org; Fri, 10 Jan 2025 07:23:03 -0500 Received: from tobias.gr ([2a02:c205:2020:6054::1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tWE2X-0004t1-Kp for help-guix@gnu.org; Fri, 10 Jan 2025 07:23:03 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=oCC+gfqNyphXn WAq2+OoudASWDeK+R6ZDcfZFS7+cfI=; h=references:in-reply-to:subject:to: from:date; d=tobias.gr; b=XFBWe0PnQAK9gBT2zsshDuvdbsvVkjpCME4m1qxTsIcF uzjvpcLYUdpQIA4gh6aiUhWMJCPaSbaAlPziLVRioIEzXh4o8y/kJlfl7mAkfYA2bapsVZ Kt5Ujxq5PZ/zhddfP7wjAhFnVxmiTxrTEz+1MVKfESwbLxWXhHWpOSrBLIh1lCo+U2/0nm ii+VuGYynSpcWtnCETh36WNN7inKDtCRNoRk19oidII77df3IX3mY2/9Z9i21kSVx8QB+h nZ3tyV50qs5SmyGq23/og1bd9q1/eUFPg+MdoEyMZrtSpO/c2flwQEBN8SiFVKobK7ZADg cSMS8Dot3vTezFzrwg== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 060bee6f (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO); Fri, 10 Jan 2025 12:22:47 +0000 (UTC) Date: Fri, 10 Jan 2025 12:22:53 +0000 From: Tobias Geerinckx-Rice To: help-guix@gnu.org, Marcel van der Boom Subject: Re: Authenticate a channel In-Reply-To: <6f5ae1ff-a5fa-4c82-9cd2-54d38daa4c0b@hsdev.com> References: <4bf83a0c-cff8-427e-97c0-9ae65febd426@korwin-zmijowski.fr> <87ed1ru1nv.fsf@gnu.org> <6f5ae1ff-a5fa-4c82-9cd2-54d38daa4c0b@hsdev.com> Message-ID: <79C829FF-5773-4761-A3E5-B6C326E7AC1E@tobias.gr> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Autocrypt: addr=me@tobias.gr; prefer-encrypt=mutual; keydata= mQINBFVks2ABEACjGBPhWf/qx0L9OhEIrAFTimo5dHa1FLy0AHaHvxmwYSIdJmERYGiNle1rcOvw cFRtu8KJUsrs27Vgoso3qHJpghVitUUf0v3ZuXQT9kfuQLz1Y8pyMzHwVFMLiJVj4Z3y7CJk+xyZ cpSAMbyPINbFVEhsK+z+8ojVGuaiucZkib6b67ySG6Pp1bon8xVvosj71ZRjfXh1t4X8laWO7fQq itT9lmc6DxbE/4vIhR+Vb2MblaA+DyHoNHGGao89h4CO99lfzWzsux41DnEG9d317sJRQTig6Wja EKHXZRA9FbfogD4SDa2uQYCpTJpsVjAyZyu2fuJ+t0zJJ+Ai9qDY87P6hOyd+/n8Eh2Y4TbxJiDo XUT72XY/RfPH1qrMIP3EI/NNL4LQeGG1n+625k3OVWcRVXG2vRrB6qurLmGkLEmjXWCFD9cCRGfH LeajLm9sM+t/nZPZ3btetcmK9tM2EwivyLUNhrTk73UUnI4CSAzdO2cISqo9zSMtFgj2alqd2fOR s7CKfEn+5PquruDbp/Ej7dOOrjgWSCXLDDYXRrtaKrLz/dhqq5ftFYi9tUTTQecFotM08fPtu+Kw JMP2ySHCkUqp0GvrUCeSRPAJZsmJrd535y+LlRhnqb0mbG4dgMa8A6xhkFYugnqldy/q7kX1EmRI 686N7bA6fh1MCQARAQABtCRUb2JpYXMgR2VlcmluY2t4LVJpY2UgPG1lQHRvYmlhcy5ncj6JAlIE EwEKADwCHgECF4ACGQECGwMWIQT1vFU0w28Ah7OdNu8cncT+udt8SwUCXpe0rAYLCQgHCgQFFQoJ CAsFFgMCAQAACgkQHJ3E/rnbfEu5IhAAk+0BW/twLmx1xMmeXn+I7Ne6SG3++0TRBduEaGWV3n59 lX6XPZUQdAPpS4uy0H+c90Owkw+aWUEwfyOWphrxZRtR2cCOP/3Pxj3Vgtz5RkY4u27lMj15jqa/ p7l2l256ZKJOegr9TvOWtkhMp5lxeVHT6f/44Kv/r/8mMCgSnLXYrEWPE462xI+mIJOanHLJb6No f2xLRCvXoLLp7Yejjv1dwOO71R9PMRhtNy46pZM1ylQ++UTkeSocJw4aNtiu0DHOkX9AlNBkutIx x07RpO+MqJKlzzLeQiC/fE5+dR2itRONopwXAqN3MuT7MonQo5XifBn+VK8i9xZWTXZDkWItWtCC 8oIj4zwxwFWiTmMwwSbI3Wdd/11Zw3CLc4Gd0M6NVgvAnuErQXSgr4lrWhZcncvi4L6EJTc9AUSa 8UWPF+S9t+CHTukpJmcYnsccMkOBhT7OZlmWBsylrYK/JTRWqgWSHWdSKmOuLK+MGDneOZEHkEcf jeXRWvmG7MSU5tE/p7NDLIg9vkvhQV9b0q4OtY65uNWbRe2QRJaYMDcYUAeSZzivRa8VaoVen6tb FvH44zpCxubn23ABl9YIzwvJC++r+H2qLdLpy0cfITiZadZ74Ae0aosNw7XARS6OY+A03BfXyPiI 2oW0jf/PdH9sh2mQrQxIQJ5cZz6Z3X20MFRvYmlhcyBHZWVyaW5ja3gtUmljZSAodG9iaWFzLmdy KSA8bWVAdG9iaWFzLmdyPokCNgQwAQoAIBYhBPW8VTTDbwCHs5027xydxP6523xLBQJZUuJkAh0g AAoJEBydxP6523xLwEoP/iaVWdICefmaZ+bkdUg6hwTKxSPlYdLoaCxYI5V2NnZYXG0dy47E7WJP 4EmTDldcne4UG5NyCgXPSMZDNMqcddEMNbmlssTcLKyu6R/VvTcuL3pEhNoLzm9t2IHR/YGAHJIc pyfmJ3amGSlsbo6s6Vv+mbrJTRPIDpLUst/PDoGYihcSKTxoIw8RtNAy+FAliIdJ8ZuPA3BTxQei sQzgWJo68UInvnFp4juq0zupNDqKddemI8kZCRK/fFPBDD71nqiSJjx2tvbjkTiPU9gmTp7Nulgj ZATZIt0pUhn87w15ItzrsiEjTYCMTmHY5wnvyLarFKZLzQjgUJfsbv4WRJRnX0/EEJWMvMtSdtXL fjwTLrSGAr4vh13PMfE6uVkGkeCV/8BfGJqRE4zkI+QOVILw6VSAP6sdtGSGb52bcCuPj7p9zGIB IuKFudT+DzUb5uV2jbahSjJ8X4Ak/ruG2Hv3iICZawDpHV1JDNgY910KNi5T6gFrjFA2G6aiXDCO SlToLPnPBYH85UVOsp2VykE9AREKS7a7o76cibjwBNN+4xJqJRxhs9YH4JKzE3w/ptVnx49QFBGc pjPkzMTs7DtanD8iqL4J6afnycv9KqIlNJONaMHvzxeunV7QCsoF6DdusZJKFMexiDBaOFUmGFFS XfzK2oNjknx1QApyTPvhiQJpBBMBCgBTAhsvAh4BAheAAhkBBAsJCAcFFQoJCAsFFgMCAQASGGhr cDovL3BncC5taXQuZWR1FiEE9bxVNMNvAIeznTbvHJ3E/rnbfEsFAllS4TwFCRa6MNwACgkQHJ3E /rnbfEuMFg//csSmcerqM+h1jwlKPJ4UiLXj3kFxSuSr0DrJzgLIpjuMdB2bhJ3YZwJTrZI9P7DP v+ebTKoeCjxoi5zJcINakZ9/FBn3cOCsYmpdHdaOPm34pHh9c0y9+NAvGJvugBRWIWK3qYYJzjff YL1r5lGCM4FXuhTcjVTTs5iCvYlAhtnHEAM6+c+mftdwrCJaqCiz3G13OCtpujn8fOn/B2nv6ZdT hen3Xqh3xBU2PnxPhVtyOulsJ318SKbUAk0h3tbLLkzFIS+7XvpHuwB72NkZw233IAN1Uq/nmJK/ YIsi+icNGpI60+PnLFiqYrSmtD6BCf8pOPq+isscu5uTuhfHt8fjLZPiqyf12CLoNKIp94sUi/1n M75GKz9MPWs6vqosq+E1xs9wVBw0gwUluejWgg3mIE3754W6xQ6tnpspdrt+x5kykfPMD3r1T8uq +z4ZUtE3A6QIjjxzIN0Xk8ZpC5Mg3yUzhyM1qF4e8pM2U7/tJC9BO5CNWJmKBqmGZ5sYw85wjEZ+ WnfU770tgCGZjcjIYjqYuoCgHMd2J8pkXdf76CINWK4+fCoKHr/4kWfU3e8ikFStTBer/Bu5tXa5 RPh90F6l2DNRitUdv+7vAiFnAuP61ZSUSqRbOiE1SPTv4cGBOCgB7xIOU6+rKzlweR/vO0otLZc+ TyFnSKPrfzg= Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: help-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Queue-Id: 648706FC0 X-Migadu-Scanner: mx13.migadu.com X-Migadu-Spam-Score: -0.46 X-Spam-Score: -0.46 X-TUID: nCZnxiXO3gLe H(o)i Marcel, On 29 December 2024 13:04:59 UTC, Marcel van der Boom = wrote: >- are subkeys supported? anything special needed? AIR Guix does not (yet?) resolve subkeys to an authorised primary=2E This= means that each signing subkey used must be explicitly authorised=2E If y= ou look at upstream Guix's =2Eguix-authorizations, you'll see a good few ';= ; Primary: XXXX=E2=80=A6' comments above certains keys, including mine=2E >- do i need to pull the keyring in manually over time of does the machine= ry take care of this? If you mean in a git checkout: you must manually fetch any updates to the = keyring branch before rebasing + pushing your changes=2E There is no magic= =2E If you mean 'guix pull', even from a file:// URL: guix clones and updates = the entire repository, not only 'master'=2E No additional action is needed= to fetch the latest upstream keyring=2E Kind regards, T G-R Sent on the go=2E Excuse or enjoy my brevity=2E