On Mon, January 31, 2011 21:18, Martin Zobel-Helas wrote: > a more theoretical question quite related to this: > > If one plans to have the key replaced in the keyring, and we have a > fellow DD in the keyring who's only trust path to other Debian > Developers goes via that key (this might become a real scenario when we > do a bigger round of key replacements) will that key replacement really > happen? Thus CCing keyring maintainers.
(I'm not a keyring maintainer.) Currently connectedness has only been used to decide on entry into the keyring. In a similar scenario, if you are signed by just one DD and that DD retires from Debian, you are not removed from the keyring, even though you're no longer connected to other DD's by trust paths. And that is not a problem, because the process is used to establish identity. Your identity has been established upon entry, and this fact is not lost when connectedness of your key is reduced. Thus it's not essential to keep the keys internally connected. Cheers, Thijs -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]
