Gentoo Archives: gentoo-dev

From: Matthew Thode <prometheanfire@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [PATCH v2 03/11] glep-0063: Clarify dedicated signing subkey in minimal reqs
Date: Wed, 04 Jul 2018 17:07:13
Message-Id: 20180704170658.5ntxhijuv7bywbnk@gentoo.org
In Reply to: Re: [gentoo-dev] [PATCH v2 03/11] glep-0063: Clarify dedicated signing subkey in minimal reqs by "Michał Górny"
1 On 18-07-04 12:54:50, Michał Górny wrote:
2 > W dniu śro, 04.07.2018 o godzinie 12∶35 +0200, użytkownik Kristian
3 > Fiskerstrand napisał:
4 > > On 07/04/2018 12:23 PM, Michał Górny wrote:
5 > > > -2. Root key and signing subkey of EITHER:
6 > > > +2. Root key and a dedicated signing subkey, both of EITHER:
7 > >
8 > > "dedicated" here might be misread to be gentoo-specific, which doesn't
9 > > really make much sense.
10 >
11 > What alternative do you suggest? We really want to make clear that we
12 > require a separate subkey, and that subkey is not marked for encryption.
13 >
14
15 I'd suggest something along the lines of 'subkey with signing only
16 capabilitiyies' or 'signing only subkey'. I state this because you are
17 able to have a combined SE subkey which would match the language of
18 dedicated or simply only saying 'signing subkey'.
19
20 --
21 Matthew Thode (prometheanfire)

Attachments

File name MIME type
signature.asc application/pgp-signature