Gentoo Archives: gentoo-dev

From: "Michał Górny" <mgorny@g.o>
To: gentoo-dev@l.g.o
Cc: robbat2@g.o
Subject: Re: [gentoo-dev] [PATCH v2 03/11] glep-0063: Clarify dedicated signing subkey in minimal reqs
Date: Wed, 04 Jul 2018 10:59:52
Message-Id: 1530701982.914.39.camel@gentoo.org
In Reply to: Re: [gentoo-dev] [PATCH v2 03/11] glep-0063: Clarify dedicated signing subkey in minimal reqs by Kristian Fiskerstrand
1 W dniu śro, 04.07.2018 o godzinie 12∶58 +0200, użytkownik Kristian
2 Fiskerstrand napisał:
3 > On 07/04/2018 12:54 PM, Michał Górny wrote:
4 > > W dniu śro, 04.07.2018 o godzinie 12∶35 +0200, użytkownik Kristian
5 > > Fiskerstrand napisał:
6 > > > On 07/04/2018 12:23 PM, Michał Górny wrote:
7 > > > > -2. Root key and signing subkey of EITHER:
8 > > > > +2. Root key and a dedicated signing subkey, both of EITHER:
9 > > >
10 > > > "dedicated" here might be misread to be gentoo-specific, which doesn't
11 > > > really make much sense.
12 > >
13 > > What alternative do you suggest? We really want to make clear that we
14 > > require a separate subkey, and that subkey is not marked for encryption.
15 > >
16 >
17 > "signing subkey" already implies as much though, but maybe write it out
18 > more "Both the primary key and the signing subkey needs to be of EITHER;"
19 >
20
21 Or maybe even make a separate point about having a separate signing
22 subkey?
23
24 --
25 Best regards,
26 Michał Górny

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies