[SM-Discuss] gnupg 1.4.8 is stricter

Remko van der Vossen wich at stack.nl
Fri Jan 11 11:39:04 EST 2008


On Fri, Jan 11, 2008 at 05:27:33PM +0100, Jaka Kranjc wrote:
> On Friday 11 of January 2008 17:29:21 Eric Sandall wrote:
> > Shall we verify (non-strict) the tarball still matches the GPG and
> > then re-sign with a cross-certified key?
> Sounds practical. I guess my update fixed a few, since the newer keys were 
> already cross-certified.

Of course people should be prodded to cross certify their key, a non
cross certified key with a signing subkey is not secure.

Regards, Remko.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.ibiblio.org/pipermail/sm-discuss/attachments/20080111/b194cb00/attachment.bin 


More information about the SM-Discuss mailing list