[GitHub] [daffodil] mbeckerle commented on a change in pull request #657: Update Apache Daffodil KEYS

[GitBox <gi...@apache.org>]

mbeckerle commented on a change in pull request #657:
URL: https://github.com/apache/daffodil/pull/657#discussion_r728326023



##########
File path: KEYS
##########
@@ -7,24 +7,34 @@ Developers:
     Per Apache guidelines (https://www.apache.org/dev/openpgp.html#key-gen-generate-key)
       - RSA and RSA key with keysize 4096, and no expiration
       - Use your apache email
-    
+
     gpg --full-generate-key
 
 
-  Adding your key to this file:
-    (gpg --list-sigs <key id> && gpg --armor --export <key id>) >> this file.
+  Add your key to this file:
+
+    gpg --list-sigs <key id> >> KEYS
+    gpg --armor --export <key id> >> KEYS
 
   Publish the key:
-    gpg --keyserver pgp.mit.edu --send-keys <key id>
 
-  Signing another developers key:
+    gpg --export <key id> > mykey.pgp
+    go to https://keys.openpgp.org/upload, upload mykey.pgp, and verify your email address when prompted
+
+  Sign another developer's key:
+

Review comment:
       Am I going to get spam email bombed now that I uploaded and made my email "searchable", or was it already seachable on the other key sites?




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@daffodil.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org