On Wed, Aug 20, 2025 at 10:23:35AM +0200, Raphael Hertzog wrote: > I might be able to add /srv/keyring.debian.org/keyrings/debian-nonupload.gpg > to the list of recognized keys but I'd like some confirmation that this is > the right thing to do. Shouldn't a non-uploading DD that still has DM > rights be listed in debian-maintainers.gpg too?
This is what dak is doing. It uses both debian-maintainers.gpg and debian-nonupload.gpg with the same permission set. Those keyrings are maintained differently. So no, it is not expected the DD-notuploading are listed in the DM keyring, the same as DD-uploading are not listed either. Bastian -- Bones: "The man's DEAD, Jim!"

