You are viewing a plain text version of this content. The canonical link for it is here.
Posted to general@incubator.apache.org by Janne Jalkanen <Ja...@ecyrd.com> on 2008/09/24 08:36:51 UTC
Key signing practicalities Was: status of PGP support in Maven
> So you assume that that www.apache.org can not be hacked? What if a
> signing key *IS* in KEYS but not signed by anyone (because the
> developer
> has never attended an Apache key signing event)?
Which reminds me - if one does not attend an Apache key signing event
(which tend to be in faraway countries, traveling to which usually
means parting with lots of cash), how *does* one get the key signed?
Is there a regional list somewhere?
Any people near Helsinki, Finland who are willing to have a coffee
and sign my key? ;-)
/Janne
---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org
Re: Key signing practicalities Was: status of PGP support in Maven
Posted by Jukka Zitting <ju...@gmail.com>.
Hi,
On Wed, Sep 24, 2008 at 8:36 AM, Janne Jalkanen
<Ja...@ecyrd.com> wrote:
> Any people near Helsinki, Finland who are willing to have a coffee and sign
> my key? ;-)
I'll be in Helsinki for two weeks after the ApacheCon US.
BR,
Jukka Zitting
---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org
Re: Key signing practicalities Was: status of PGP support in Maven
Posted by Niclas Hedhman <ni...@hedhman.org>.
On Wed, Sep 24, 2008 at 2:36 PM, Janne Jalkanen <Ja...@ecyrd.com>wrote:
> So you assume that that www.apache.org can not be hacked? What if a
>> signing key *IS* in KEYS but not signed by anyone (because the developer
>> has never attended an Apache key signing event)?
>>
>
> Which reminds me - if one does not attend an Apache key signing event
> (which tend to be in faraway countries, traveling to which usually means
> parting with lots of cash), how *does* one get the key signed? Is there a
> regional list somewhere?
>
> Any people near Helsinki, Finland who are willing to have a coffee and sign
> my key? ;-)
Yes, asking for people on community@ in your "not faraway country" is one
way to do it. Another is that I am sure you travel once in a while, and
before going there, you can ask if someone is up for a coffee and
keysigning.
Cheers
Niclas
Re: Key signing practicalities Was: status of PGP support in Maven
Posted by David Crossley <cr...@apache.org>.
Janne Jalkanen wrote:
> >
> >So you assume that that www.apache.org can not be hacked? What if a
> >signing key *IS* in KEYS but not signed by anyone (because the
> >developer
> >has never attended an Apache key signing event)?
>
> Which reminds me - if one does not attend an Apache key signing event
> (which tend to be in faraway countries, traveling to which usually
> means parting with lots of cash), how *does* one get the key signed?
> Is there a regional list somewhere?
Not all committers have added themselves to people.apache.org ...
ASF Committer Map
http://people.apache.org/map.html
See other notes about key signing so that you are ready
when you do meet someone ...
https://svn.apache.org/repos/private/committers/docs/pgp-key-signing.txt
-David
> Any people near Helsinki, Finland who are willing to have a coffee
> and sign my key? ;-)
>
> /Janne
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> For additional commands, e-mail: general-help@incubator.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org
Re: Key signing practicalities Was: status of PGP support in Maven
Posted by Craig L Russell <Cr...@Sun.COM>.
Hi Janne,
I will be traveling to Helsinki within the next 6 months (probably).
If you're on tripit you can watch for my trip (in case I forget for
some reason to let you know).
Craig
On Sep 23, 2008, at 11:36 PM, Janne Jalkanen wrote:
>> So you assume that that www.apache.org can not be hacked? What if a
>> signing key *IS* in KEYS but not signed by anyone (because the
>> developer
>> has never attended an Apache key signing event)?
>
> Which reminds me - if one does not attend an Apache key signing
> event (which tend to be in faraway countries, traveling to which
> usually means parting with lots of cash), how *does* one get the key
> signed? Is there a regional list somewhere?
>
> Any people near Helsinki, Finland who are willing to have a coffee
> and sign my key? ;-)
>
> /Janne
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> For additional commands, e-mail: general-help@incubator.apache.org
>
Craig L Russell
Architect, Sun Java Enterprise System http://db.apache.org/jdo
408 276-5638 mailto:Craig.Russell@sun.com
P.S. A good JDO? O, Gasp!