On Fri, 29 Oct 2004 14:13:47 +0200, Nils Philippsen <nphilipp(a)redhat.com> wrote:
Come on, you know that you needn't do it that way. For Rawhide,
all we
(that is some people including me) want to have is that the packages
that originate in the Red Hat build system are signed with a short-lived
key that we can be sure that the package is in fact the one piped
through the build system. This can be made part of the pushing step in
the process.
Short lived? I think this is the first time I've seen someone
mentioning a short lived key. How short lived?
-jef