Skip to Content.
Sympa Menu

sm-commit - Re: [SM-Commit] GIT changes to master gri =?unknow n-8bit?Q?moire_by_Andra=C5?�d8319bdbc26)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Ladislav Hagara <ladislav.hagara AT unob.cz>
  • Cc: SM-Commit <sm-commit AT lists.ibiblio.org>
  • Subject: Re: [SM-Commit] GIT changes to master gri =?unknow n-8bit?Q?moire_by_Andra=C5?�d8319bdbc26)
  • Date: Thu, 5 Oct 2006 01:48:19 +0200 (CEST)

Do we need all these keys? All are used to sign the sources?
Quite big file.


The file is only 28k it's not really that big... And we won't really
save a whole lot of space on such minute details.

The best idea would be to get as much BUILD, INSTALL files merged into a
default_build(something in the way the gnustep-* spells do it)

It's still a valid point; just because it's less bloat than other spots,
doesn't mean it's okay bloat. Do they use all of those keys for signing
the tarball or can it be trimmed down?


More keys = bigger probability of exploitation.
Can we trust all these keys?

Moreover, try "gpg --no-default-keyring --keyring ./grisbi.gpg --list-sig".
One of key has 190 sigs. Do we need them?
You can remove them by "gpg --no-default-keyring --keyring ./grisbi.gpg --export --export-options export-minimal"


--
Ladislav Hagara





Archive powered by MHonArc 2.6.24.

Top of Page