[SM-Commit] GIT changes to master gri =?unknow n-8bit?Q?moire_by_Andra=C5?�d8319bdbc26)
Ladislav Hagara
ladislav.hagara at unob.cz
Wed Oct 4 19:48:19 EDT 2006
>>> Do we need all these keys? All are used to sign the sources?
>>> Quite big file.
>>>
>>
>> The file is only 28k it's not really that big... And we won't really
>> save a whole lot of space on such minute details.
>>
>> The best idea would be to get as much BUILD, INSTALL files merged into a
>> default_build(something in the way the gnustep-* spells do it)
>
> It's still a valid point; just because it's less bloat than other spots,
> doesn't mean it's okay bloat. Do they use all of those keys for signing
> the tarball or can it be trimmed down?
More keys = bigger probability of exploitation.
Can we trust all these keys?
Moreover, try "gpg --no-default-keyring --keyring ./grisbi.gpg
--list-sig".
One of key has 190 sigs. Do we need them?
You can remove them by "gpg --no-default-keyring --keyring ./grisbi.gpg
--export --export-options export-minimal"
--
Ladislav Hagara
More information about the SM-Commit
mailing list