You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jspwiki.apache.org by "Janne Jalkanen (JIRA)" <ji...@apache.org> on 2009/05/24 11:38:45 UTC
[jira] Created: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Developers tied into ASF PGP web of trust
------------------------------------------
Key: JSPWIKI-560
URL: https://issues.apache.org/jira/browse/JSPWIKI-560
Project: JSPWiki
Issue Type: Task
Reporter: Janne Jalkanen
Fix For: Graduating
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Janne Jalkanen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12722766#action_12722766 ]
Janne Jalkanen commented on JSPWIKI-560:
----------------------------------------
Hm... So - Florian, Harry, Dirk, Andrew! You should try and hook up with your local Apache people and ask someone to sign a key... Or go to Apachecon. Or have your summer holidays in Finland ;-)
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Harry Metske (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12722406#action_12722406 ]
Harry Metske commented on JSPWIKI-560:
--------------------------------------
a couple, say 3 or 4 ?
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Harry Metske (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12743851#action_12743851 ]
Harry Metske commented on JSPWIKI-560:
--------------------------------------
That's nice Florian.
I think 2 people in the project who can sign within the web of trust is nice, if you all agree we can close this one too.
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Janne Jalkanen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12722403#action_12722403 ]
Janne Jalkanen commented on JSPWIKI-560:
----------------------------------------
Question: how many of us actually do need to be tied to the web of trust, anyway?
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Janne Jalkanen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12712532#action_12712532 ]
Janne Jalkanen commented on JSPWIKI-560:
----------------------------------------
Currently I think only I (Janne) have a signed PGP key within Apache's web-of-trust. We need to get others signed as well.
Andrew, can you prepare a key for our next meeting, and I'll be happy to sign it?
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Harry Metske (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12712564#action_12712564 ]
Harry Metske commented on JSPWIKI-560:
--------------------------------------
For those of you who are not that familiar with it (including me), I found Henk Pennings explanation very useful : http://people.apache.org/~henkp/trust/
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Janne Jalkanen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Janne Jalkanen closed JSPWIKI-560.
----------------------------------
Resolution: Fixed
I think this is fine.
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Craig Russell (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12722790#action_12722790 ]
Craig Russell commented on JSPWIKI-560:
---------------------------------------
The issue is not so much how many folks should be tied into the Apache WOT. Everyone who signs releases needs to have a key (duh) and any key used to sign a release should be tied into the WOT by being signed, and by having the owner sign others' keys.
Then the question is how many signatures on your keys are enough. One is enough, but more is (are) better. Cross-signed keys are best.
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Janne Jalkanen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12743865#action_12743865 ]
Janne Jalkanen commented on JSPWIKI-560:
----------------------------------------
Well done, Florian! I think two people is sufficient (that means that there is redundancy also for rolling releases).
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (JSPWIKI-560) Developers tied into ASF PGP web of
trust
Posted by "Florian Holeczek (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JSPWIKI-560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12743849#action_12743849 ]
Florian Holeczek commented on JSPWIKI-560:
------------------------------------------
Unfortunately I couldn't have summer holidays in Finland ;-) But I met Apache committer Stefan Seelmann in Munich this week and we signed our keys.
> Developers tied into ASF PGP web of trust
> ------------------------------------------
>
> Key: JSPWIKI-560
> URL: https://issues.apache.org/jira/browse/JSPWIKI-560
> Project: JSPWiki
> Issue Type: Task
> Reporter: Janne Jalkanen
> Fix For: Graduating
>
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.