On Sun, Nov 18, 2012 at 5:56 AM, Phil Hagelberg <p...@hagelb.org> wrote:

> If you don't have a key yet, generate one with `gpg --gen-key`. The
> default settings are pretty good, though I'd recommend making it expire
> in a year or two. Next find your key ID. It's the 8-character part after
> the slash on the line beginning with "pub":
>

As I said at the conj, I'm looking forward to the documentation explaining
how to install and use gpg since it's not provided by default on either Mac
OS X or Windows.

Then you can show it with `gpg --export -a $KEY_ID`.
>

$KEY_ID? (again, as I noted at the conj, without good documentation on the
Leiningen site for this, folks won't necessarily know what this is or why
they need to do all of this, especially the web of trust stuff you
discussed and key exchanges / publishing etc).

The Releases repository is the final missing piece of the puzzle for a
> final release of Leiningen 2. But the time isn't yet right because
> version 2 will only check Central and the Clojars Releases repo by
> default. So since the new Releases repo only has a handful of jars, it
> would be a jarring transition to switch at this point. That's why we're
> hoping library maintainers can do what's necessary to ensure their
> libraries make it into the new repository.
>

So if the status quo persists and Mac and Windows users don't bother to
install gpg, the Clojars process will stay exactly as it is? In other
words, we can simply ignore the whole gpg issue and continue with things
just as we do today and it won't break? Will users of Clojars projects be
required to install and use gpg?

(I'm not arguing against encryption or signing - just trying to a) point
out that I think the vast majority of Clojure library developers probably
don't have gpg installed and b) establish what is _required_ vs _optional_
and figure out what your plans are regarding existing Clojars projects and
users)
-- 
Sean A Corfield -- (904) 302-SEAN
An Architect's View -- http://corfield.org/
World Singles, LLC. -- http://worldsingles.com/

"Perfection is the enemy of the good."
-- Gustave Flaubert, French realist novelist (1821-1880)

-- 
You received this message because you are subscribed to the Google
Groups "Clojure" group.
To post to this group, send email to clojure@googlegroups.com
Note that posts from new members are moderated - please be patient with your 
first post.
To unsubscribe from this group, send email to
clojure+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/clojure?hl=en

Reply via email to