Gentoo Archives: gentoo-dev

From: Luke-Jr <luke-jr@g.o>
To: Gentoo Developers <gentoo-dev@g.o>
Cc: Mike Frysinger <vapier@g.o>
Subject: Re: [gentoo-dev] disabling password authentication on dev.gentoo.org
Date: Tue, 02 Dec 2003 03:29:34
Message-Id: 200312020329.23712.luke-jr@gentoo.org
In Reply to: Re: [gentoo-dev] disabling password authentication on dev.gentoo.org by Mike Frysinger
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 On Tuesday 02 December 2003 03:00 am, Mike Frysinger wrote:
5 > considering his initial points:
6 > (1) admin is bottleneck
7 There's a few hours delay from when key is uploaded to dev to when it's copied
8 to cvs anyway... Besides, considering the admin need to create the account in
9 the first place, this isn't really an issue. Existing devs can have keys
10 uploaded before passwords are disabled.
11 > (2) verifying the key wasnt messed with in transit
12 > your solution really doesnt address either ... in fact the irc thing is a
13 > *really bad* idea ...
14 > after all, dcc/irc is as easy to manipulate as telnet (well even easier :D)
15 Bug freenode to support GPG authentication for registered nicknames? =p
16 - --
17 Luke-Jr
18 Developer, Gentoo Linux
19 http://www.gentoo.org/
20 -----BEGIN PGP SIGNATURE-----
21 Version: GnuPG v1.2.3 (GNU/Linux)
22
23 iD8DBQE/zAcPZl/BHdU+lYMRAlhqAJ43z8FibiOGBnqWjuUiz+pcS5dcHwCgnAJc
24 pxpjdfYzSnZYtGIuGW0XHYs=
25 =rPhR
26 -----END PGP SIGNATURE-----
27
28 --
29 gentoo-dev@g.o mailing list

Replies

Subject Author
Re: [gentoo-dev] disabling password authentication on dev.gentoo.org "Robin H. Johnson" <robbat2@g.o>