Gentoo Archives: gentoo-dev

From: Ciaran McCreesh <ciaran.mccreesh@××××××××××.com>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Monthly Gentoo Council Reminder for April
Date: Thu, 03 Apr 2008 12:02:03
Message-Id: 20080403130151.12507f1a@snowcone
In Reply to: Re: [gentoo-dev] Monthly Gentoo Council Reminder for April by Mike Auty
On Thu, 03 Apr 2008 12:56:59 +0100
Mike Auty <ikelos@g.o> wrote:
> Petteri Räty wrote: > | Yeah, you only need access to one ebuild to do whatever you want to > | user's systems. > > Perhaps then we should direct more of our efforts towards the GPG > package signing system, so that when a dev becomes a libability, their > keys can be revoked?
Signing offers no protection against a malicious developer. -- Ciaran McCreesh

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-dev] Monthly Gentoo Council Reminder for April Mike Auty <ikelos@g.o>