On Tue, May 10, 2011 at 08:19:27AM +0200, "Paweł Hajdan, Jr." wrote: > On 5/10/11 4:08 AM, Jim Ramsay wrote: > > - Does this tree signing key have to be DSA? Or is RSA okay too? > > No idea, I'd probably just try and see if signing works.
/me plugs his ears and presses "GO"... Looks like it works fine! > > - If I have a key already, should I generate a new subkey just > > for manifest signing, make a whole new primary key, or just use > > the same key I use to sign my emails? > > See > <http://archives.gentoo.org/gentoo-dev/msg_bdc24ba33036ef413e620dc94532e080.xml>, > I think no separate key should be needed. You know, I even remember reading this email, but focused more on the SSL Cert recommendation part than immediate answer. Thanks :) -- Jim Ramsay