| 1 |
On Fri, Mar 25, 2011 at 10:33 AM, Michał Górny wrote: |
| 2 |
> On Fri, 25 Mar 2011 08:15:32 +0100 Torsten Veller wrote: |
| 3 |
>> - keys are revoked [3] |
| 4 |
> |
| 5 |
> How about manifests signed before the key was revoked? |
| 6 |
|
| 7 |
you cant do this at commit time (computers cant predict the future), |
| 8 |
so it has no bearing on the original idea |
| 9 |
|
| 10 |
people who need to revoke their key are responsible for either |
| 11 |
notifying the Gentoo community of the issue and verifying that all the |
| 12 |
commits in the tree before their revocation were actually made by them |
| 13 |
-mike |
Archives