Gentoo Archives: gentoo-dev

From: Dane Smith <c1pher@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Re: rejecting unsigned commits
Date: Tue, 10 May 2011 13:14:01
Message-Id: 4DC938E7.2090200@gentoo.org
In Reply to: Re: [gentoo-dev] Re: rejecting unsigned commits by "Paweł Hajdan
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 On 05/10/11 02:19, "Paweł Hajdan, Jr." wrote:
5 > On 5/10/11 4:08 AM, Jim Ramsay wrote:
6 >> - Does this tree signing key have to be DSA? Or is RSA okay too?
7 >
8 > No idea, I'd probably just try and see if signing works.
9 >
10 >> - If I have a key already, should I generate a new subkey just
11 >> for manifest signing, make a whole new primary key, or just use
12 >> the same key I use to sign my emails?
13 >
14 > See
15 > <http://archives.gentoo.org/gentoo-dev/msg_bdc24ba33036ef413e620dc94532e080.xml>,
16 > I think no separate key should be needed.
17 >
18
19 RSA2048 or so is > DSA in my opinion.
20 Just my 2 cents.
21
22 Regards,
23 - --
24 Dane Smith (c1pher)
25 Gentoo Linux Developer -- QA / Crypto / Sunrise / x86
26 RSA Key: http://pgp.mit.edu:11371/pks/lookup?search=0x0C2E1531&op=index
27 -----BEGIN PGP SIGNATURE-----
28 Version: GnuPG v2.0.17 (GNU/Linux)
29 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
30
31 iQIcBAEBAgAGBQJNyTjnAAoJEEsurZwMLhUxzkoP/21ZvCkM08fkO8Glv1r9jWi2
32 4+UkYALoBWWvTase5BMxuarliZOiEjxHYStJ9wwY3HAt0GPLpa4HS5SJBgb0VAhd
33 k1khQGLY3mufUpKCmYsad85guAeir5OETemx5cfNCuUUsCcBlFotoo4CQsRTDTmq
34 LAMNPTvXXAdrDzek03q0b6pTiBFEl+5hPQNiyY/VdYOR6/Pmd9qGUS0Cwp1FN9BL
35 oayRh2ngCnu+ebd14cGIGw1OSW/9/7HpnDsg/qDiMFE0ViImWQRCzoYifzUj531K
36 OyG/wA90N9H6fmNXf37v7UzFrZwz42W5rgpbErfAwlcank9/4WyCOHXaMR2KmQE+
37 7SjlFy6gy7w1MHNI+d/pzSbpyRdmBdtJ21UD3WxT+kofVoGJ8TRTIHAdrjx+QECC
38 5JBQDUGzy6b352DHQb2bZcrlESIteeqt6j+XAsMHW/fhaTmXMGq9gDNB+hfdPwYl
39 Uun7ZVr2gUKgpIYXIp+OAvb7VTZlhKQldFtvDuiDYOr/ZdcAk6gGXc252E9N0cHm
40 IQysE1ANAFZ+tDvFcfOt2M/SIxzaReXuwyCgdzfaFzxCP0JMG+KYLTUqRqHi0xLK
41 pNL09gP0DcENRV+9l+x3h1lbZUULoKCnG/jst6n7drW0/m96YJgPvuGodG84hs3Y
42 pQxG4e8XW5Vw6pAlJiir
43 =T+gW
44 -----END PGP SIGNATURE-----