Gentoo Archives: gentoo-dev

From: "Michał Górny" <mgorny@g.o>
To: gentoo-dev@l.g.o
Cc: robbat2@g.o
Subject: Re: [gentoo-dev] Re: [PATCH v3 00/12] GLEP 63 update
Date: Sat, 07 Jul 2018 05:46:49
Message-Id: 1530942394.900.3.camel@gentoo.org
In Reply to: [gentoo-dev] Re: [PATCH v3 00/12] GLEP 63 update by "Robin H. Johnson"
1 W dniu pią, 06.07.2018 o godzinie 06∶36 +0000, użytkownik Robin H.
2 Johnson napisał:
3 > On Thu, Jul 05, 2018 at 10:53:51PM +0200, Michał Górny wrote:
4 > > Here's third version of the patches. I've incorporated the feedback
5 > > so far and reordered the patches (again) to restore their
6 > > degree-of-compatibility order. The full text is included below.
7 >
8 > ...
9 > > v2
10 > > The distinct minimal and recommended expirations have been replaced
11 > > by a single requirement. The rules have been simplified to use
12 > > the same time of 2 years for both the primary key and subkeys.
13 >
14 > -the same time of 2 years ...
15 > +the same 2 year maximum renewal time ...
16
17 I've changed this as part of different changes, please wait for v4.
18
19 >
20 > > An additional rule requesting key renewal 2 weeks before expiration
21 > > has been added. This is in order to give services and other developers time
22 > > to refresh the key.
23 >
24 > Do we want to state that infra will start contact devs before this, or
25 > keep that as an implementation detail?
26 >
27 > > 4. Expiration date on key and all subkeys set to at most 2 years
28 >
29 > -at most 2 years.
30 > +at most 2 years from generation or refresh of expiry.
31
32 I've instead went for lengthening the period.
33
34 > > Recommendations
35 > > ---------------
36 >
37 > ...
38 > > 3. Key expiration renewed annually
39 >
40 > Can we please suggest it's updated to a fixed day of the year?
41
42 Done.
43
44 >
45 > > Gentoo LDAP
46 > > ===========
47 >
48 > ...
49 > > All Gentoo developers must list the complete fingerprint for their primary
50 > > keys in the "``gpgfingerprint``" LDAP field. It must be exactly 40 hex digits,
51 > > uppercase, with optional spaces every 8 hex digits. Regular expression for
52 > > validation::
53 >
54 > Can we please drop the spaces in the field in LDAP. I don't care if we
55 > display it with spaces, but dropping them in LDAP would be helpful.
56
57 Included an extra commit for this.
58
59 >
60 > > Copyright
61 > > =========
62 > > Copyright (c) 2013 by Robin Hugh Johnson, Andreas K. Hüttel, Marissa Fischer.
63 >
64 > Please update the copyright date:
65 > 2013,2018
66 > and add yourself as a copyright owner for the scale of these changes.
67
68 Done in the first commit. I've also added myself as an Author.
69
70 --
71 Best regards,
72 Michał Górny

Attachments

File name MIME type
signature.asc application/pgp-signature