On Tue, May 10, 2011 at 08:19:27AM +0200, "Paweł Hajdan, Jr." wrote:
> On 5/10/11 4:08 AM, Jim Ramsay wrote:
> > - Does this tree signing key have to be DSA?  Or is RSA okay too?
> 
> No idea, I'd probably just try and see if signing works.

/me plugs his ears and presses "GO"...

Looks like it works fine!

> > - If I have a key already, should I generate a new subkey just
> >   for manifest signing, make a whole new primary key, or just use
> >   the same key I use to sign my emails?
> 
> See
> <http://archives.gentoo.org/gentoo-dev/msg_bdc24ba33036ef413e620dc94532e080.xml>,
> I think no separate key should be needed.

You know, I even remember reading this email, but focused more on
the SSL Cert recommendation part than immediate answer.  Thanks :)

-- 
Jim Ramsay

Reply via email to