Public SourceMage Discussion List

[Remko van der Vossen <wich AT stack.nl>]

On Fri, Jan 11, 2008 at 05:27:33PM +0100, Jaka Kranjc wrote:
> On Friday 11 of January 2008 17:29:21 Eric Sandall wrote:
> > Shall we verify (non-strict) the tarball still matches the GPG and
> > then re-sign with a cross-certified key?
> Sounds practical. I guess my update fixed a few, since the newer keys were 
> already cross-certified.

Of course people should be prodded to cross certify their key, a non
cross certified key with a signing subkey is not secure.

Regards, Remko.

Attachment: pgpy44QkBR6KJ.pgp
Description: PGP signature