Gentoo Archives: gentoo-dev

From: Torsten Veller <ml-en@××××××.net>
To: gentoo-dev@l.g.o
Subject: [gentoo-dev] Re: Individual developer signing
Date: Fri, 11 Dec 2009 16:35:10
Message-Id: 20091211163254.GA10718@veller.net
In Reply to: Re: [gentoo-dev] Individual developer signing by "Robin H. Johnson"
1 * "Robin H. Johnson" <robbat2@g.o>:
2 > > BTW: About a third of the Manifests are signed [1]. We didn't improve
3 > > [1] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest.png
4 > > [2] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/ratio_2005.png
5 > > [3] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest2.png
6 > Nice graphs. Can you show them over a larger timespan?
7
8 Yes, I recreated them from cvs and the keys available now.
9 [1] and [3] show the progress for the last year and [4] the history since May
10 2004.
11
12 - In Jan 2008 the transition to Manifest2 was finished and all
13 signatures were dropped.
14 - I guess [2] didn't "require-cross-certification" while gnupg now
15 defaults to "require-cross-certification".
16 So the number of valid signatures in [4] is lower than in [2].
17
18 After the "Manifest2"-break the level is lower.
19
20
21 [4] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest-all.png