Gentoo Archives: gentoo-dev

From: Ciaran McCreesh <ciaran.mccreesh@××××××××××.com>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Monthly Gentoo Council Reminder for April
Date: Thu, 03 Apr 2008 12:02:03
Message-Id: 20080403130151.12507f1a@snowcone
In Reply to: Re: [gentoo-dev] Monthly Gentoo Council Reminder for April by Mike Auty
1 On Thu, 03 Apr 2008 12:56:59 +0100
2 Mike Auty <ikelos@g.o> wrote:
3 > Petteri Räty wrote:
4 > | Yeah, you only need access to one ebuild to do whatever you want to
5 > | user's systems.
6 >
7 > Perhaps then we should direct more of our efforts towards the GPG
8 > package signing system, so that when a dev becomes a libability, their
9 > keys can be revoked?
10
11 Signing offers no protection against a malicious developer.
12
13 --
14 Ciaran McCreesh

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-dev] Monthly Gentoo Council Reminder for April Mike Auty <ikelos@g.o>