Am Mittwoch, 17. Februar 2010 00:20:21 schrieb Tejas Guruswamy:
On 16/02/10 20:55, Karsten König wrote:
Am Dienstag, 16. Februar 2010 21:45:54 schrieb Markus:
Am Dienstag 16 Februar 2010 19:13:32 schrieb Anders Johansson:
Hi,
I'm not a big fan of seeing new keys suddenly released for established repositories. Not everybody trackes every thread, it was in the thread about vendor change in :Playground and :Community and that there will be a key change was pretty deep in there.
So basicly that was unintended side effects not really thought about before (guessing here).
The question about proper key distribution, signing and keys signing keys isn't something we are very fit here on -kde, that's propably why the key change was pretty sudden.
Karsten
Someone (Will?) should probably blog and post on openSUSE news about it like we did for the KDE:43 removal, please.
Sorry to continue this discussion on -kde, but regardless of whether one knew about the key change there is a question about how to verify the new key is the correct new key. Maybe there should be a key list somewhere all signed by some SuSE master key?
How would this help you ?
There was never any message containing the new key AFAIK.
The public keys can be requested via "osc signkey" and they are part of the repos. They are signed by the OBS default key, but that gives you not much information. You still can't judge about the repo, if you should add it or not, because you need anyway decide based on the project/repository setup. -- Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de -- To unsubscribe, e-mail: opensuse-kde+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kde+help@opensuse.org