Re: [tor-dev] Proposal: Don't include package fingerprints in consensus documents

2019-02-26 Thread teor
> On 27 Feb 2019, at 02:30, Iain Learmonth wrote: > > On 25/02/2019 23:30, teor wrote: >> Looks good to me, let's merge it as an "accepted" proposal? > > Is there some action I should take here like opening a PR or does > someone just pick up the text and commit it? You can open a trac ticket

Re: [tor-dev] Proposal: Don't include package fingerprints in consensus documents

2019-02-26 Thread Iain Learmonth
Hi, On 25/02/2019 23:30, teor wrote: > Looks good to me, let's merge it as an "accepted" proposal? Is there some action I should take here like opening a PR or does someone just pick up the text and commit it? Thanks, Iain. signature.asc Description: OpenPGP digital signature

Re: [tor-dev] Proposal: Don't include package fingerprints in consensus documents

2019-02-25 Thread teor
> On 23 Feb 2019, at 02:10, Iain Learmonth wrote: > > Signed PGP part > Hi all, > > On 22/02/2019 12:29, Nick Mathewson wrote: >>> I had to read this paragraph twice to understand it. >>> The way it's written, it sounds like we're doing a bad thing. >>> (Until I read the "security" section at

Re: [tor-dev] Proposal: Don't include package fingerprints in consensus documents

2019-02-22 Thread Iain Learmonth
Hi all, On 22/02/2019 12:29, Nick Mathewson wrote: >> I had to read this paragraph twice to understand it. >> The way it's written, it sounds like we're doing a bad thing. >> (Until I read the "security" section at the end of the proposal.) >> >> Can you mention the positive aspects in the

Re: [tor-dev] Proposal: Don't include package fingerprints in consensus documents

2019-02-22 Thread Nick Mathewson
On Thu, Feb 21, 2019 at 9:29 PM teor wrote: > > Hi, > > > On 22 Feb 2019, at 07:59, Iain Learmonth wrote: > > > > Signed PGP part > > Hi All, > > > > #28465 [0] needed a proposal. Feedback is welcome and encouraged. I've > > not written a proposal before, so if someone could let me know if I'm >

Re: [tor-dev] Proposal: Don't include package fingerprints in consensus documents

2019-02-21 Thread teor
Hi, > On 22 Feb 2019, at 07:59, Iain Learmonth wrote: > > Signed PGP part > Hi All, > > #28465 [0] needed a proposal. Feedback is welcome and encouraged. I've > not written a proposal before, so if someone could let me know if I'm > following the process OK (or not) then that is useful too. >

[tor-dev] Proposal: Don't include package fingerprints in consensus documents

2019-02-21 Thread Iain Learmonth
Hi All, #28465 [0] needed a proposal. Feedback is welcome and encouraged. I've not written a proposal before, so if someone could let me know if I'm following the process OK (or not) then that is useful too. Thanks, Iain. [0] https://trac.torproject.org/projects/tor/ticket/28465 Filename: