On Sun, 13 Nov 2005, Wouter Verhelst wrote: > There's one thing people are constantly overlooking here:
No, we are not. > Rember that 'having a key in the Debian keyring' is, for all practical > matters, equivalent to 'having root on all Debian installations'. A That means one must only add keys that come from the DAM, remove keys upon request of a few delegates (currently this is just James, I suppose), and follow the already documented procedure to change keys to the letter, without accepting exceptions ever. This could probably be done using a secure software+hardware solution, and James would not need to bother with keyring maintenance anymore. Otherwise, it is *high* time to have another person in the keyring maintenance team, so that James is not a single point of failure anymore. > I for one am _happy_ that James does not 'just' throw in the key if the > name is remotely similar, but does indeed verify why this new key is You're not the only one. But nobody worth listening to has advocated anything like that (not following the already documented procedures to modify the keyring) in this thread. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]