On Wed, 2020-08-19 at 10:15 -0700, Sean Whitton wrote: > On Fri 14 Aug 2020 at 09:04AM +02, Ansgar wrote: > > There are also other issues such as the system seeming to accepting > > uploads from known-compromised keys last I looked at it, though > > maybe security experts disagree how much of an issue this is in > > practice. > > If what you say about known-compromised keys is true (I think I might > know what you're alluding to but am not sure), then obviously such a > bug could easily be fixed.
Well, I can't fix it without creating dgit-ng (and setting up infrastructure for that) as dgit upstream won't accept patches from me. Ansgar
