1 |
W dniu pią, 06.07.2018 o godzinie 06∶28 +0000, użytkownik Robin H. |
2 |
Johnson napisał: |
3 |
> On Fri, Jul 06, 2018 at 08:18:32AM +0200, Michał Górny wrote: |
4 |
> > > option a) |
5 |
> > > 2 years + N: |
6 |
> > > 2 weeks <= N <= 3 months. |
7 |
> > > |
8 |
> > > option b) |
9 |
> > > Change the wording to be 'at most 2 years' instead of 'exactly 2 years'. |
10 |
> > |
11 |
> > That *is* the wording. |
12 |
> |
13 |
> I apologize. I took ulm's post as canonical and didn't confirm in the |
14 |
> original GLEP text. |
15 |
> |
16 |
> Further change to follow in response to the original text. |
17 |
> |
18 |
> > > Separately: |
19 |
> > > Is two weeks enough time for a new key distribution to users? |
20 |
> > |
21 |
> > I originally wanted to specify one month but k_f insisted on something |
22 |
> > shorter. 2 weeks were the compromise we agreed on. That said, I'd say |
23 |
> > weekly 'gpg --refresh' is what we should recommend as the bare minimum. |
24 |
> > |
25 |
> > That said, the point of two weeks is mostly to give us time to remind |
26 |
> > developers that their key is expiring and to give them time to actually |
27 |
> > read their mail and do it before it actually expires. |
28 |
> |
29 |
> Please let's start reminding them BEFORE that. I have seen a lot of |
30 |
> .away files over the last decade, and taking a 2-week offline vacation |
31 |
> does happen. |
32 |
|
33 |
The problem is, Gentoo developers are really hostile people. If you |
34 |
remind them *before* the term, they are not very nice because how does |
35 |
someone dare remind very important developer who was planning to do it |
36 |
week before expiration, and now he needed to waste his precious time |
37 |
reading your mail. |
38 |
|
39 |
-- |
40 |
Best regards, |
41 |
Michał Górny |