On Tuesday 17 February 2004 19.52, Thomas Viehmann wrote: > Goswin von Brederlow wrote: > > Having a new-maintainer keyring, to which keys could get added by any > > AM after it has been verified, and checking the signature on the dsc > > files against it sounds good to. And the keyring would be usefull for > > other purposes too. > > Why not just check if the key is signed by a key in the debian keyring? > This could be done completely automatically.
There are many people who got a signature by a DD's key who are not applying for DDship, probably never will, and who probably should not be able to upload to your queue. Getting a signature is just a confirmation of identity, after all. cheers -- vbi -- featured link: http://www.pool.ntp.org
pgp00000.pgp
Description: signature
