From: | Torsten Veller <ml-en@××××××.net> | ||
---|---|---|---|
To: | gentoo-dev@l.g.o | ||
Subject: | [gentoo-dev] Re: Individual developer signing | ||
Date: | Fri, 11 Dec 2009 16:35:10 | ||
Message-Id: | 20091211163254.GA10718@veller.net | ||
In Reply to: | Re: [gentoo-dev] Individual developer signing by "Robin H. Johnson" |
1 | * "Robin H. Johnson" <robbat2@g.o>: |
2 | > > BTW: About a third of the Manifests are signed [1]. We didn't improve |
3 | > > [1] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest.png |
4 | > > [2] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/ratio_2005.png |
5 | > > [3] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest2.png |
6 | > Nice graphs. Can you show them over a larger timespan? |
7 | |
8 | Yes, I recreated them from cvs and the keys available now. |
9 | [1] and [3] show the progress for the last year and [4] the history since May |
10 | 2004. |
11 | |
12 | - In Jan 2008 the transition to Manifest2 was finished and all |
13 | signatures were dropped. |
14 | - I guess [2] didn't "require-cross-certification" while gnupg now |
15 | defaults to "require-cross-certification". |
16 | So the number of valid signatures in [4] is lower than in [2]. |
17 | |
18 | After the "Manifest2"-break the level is lower. |
19 | |
20 | |
21 | [4] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest-all.png |