Key rotation deployments (Was: bits from the release team)

2006-05-26 Thread Ondrej Sury
On Fri, 2006-05-26 at 19:57 +0200, Florian Weimer wrote: > > But that is not relevant to the problem. Experience shows that keys do > > get compromised and need changing. So rotation or no rotation the key > > change has to be handled anyway. Rotation just adds it at specific > > intervals on top o

Re: Bug#368985: ITP: mod-bt -- BitTorrent tracker for the Apache2 web server

2006-05-26 Thread Ondrej Sury
On Fri, 2006-05-26 at 08:07 -0700, Tyler MacDonald wrote: > * Package name: mod-bt I suggest to name your package (you can name just binary package, but it since you are building just one binary package, it's easier to rename source package as well) as libapache-mod-bt to follow common practic

Re: Bug#368985: ITP: mod-bt -- BitTorrent tracker for the Apache2 web server

2006-05-26 Thread Tyler MacDonald
Ondrej Sury <[EMAIL PROTECTED]> wrote: > On Fri, 2006-05-26 at 08:07 -0700, Tyler MacDonald wrote: > > * Package name: mod-bt > > I suggest to name your package (you can name just binary package, but it > since you are building just one binary package, it's easier to rename > source package as

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul Johnson wrote: > On Thursday 25 May 2006 08:30, Manoj Srivastava wrote: >> Given time, one can pay more attention to each document (I require at least >> two photo ID's issued by the government). > > WTF? In Oregon, if you have a driver's licen

Re: [Debconf-discuss] Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Thomas Bushnell BSG
Manoj Srivastava <[EMAIL PROTECTED]> writes: > I think the core issue here is if we deem presenting purchased > identification at an event designed to extend the web of trust > acceptable behaviour. I don't think anyone has said that it's satisfactory. -- To UNSUBSCRIBE, email to [EM

Re: [Debconf-discuss] Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Robert Collins
On Fri, 2006-05-26 at 15:45 -0700, Thomas Bushnell BSG wrote: > Manoj Srivastava <[EMAIL PROTECTED]> writes: > > > I think the core issue here is if we deem presenting purchased > > identification at an event designed to extend the web of trust > > acceptable behaviour. > > I don't thin

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Paul Johnson
Please use reply-to-list instead of reply-to-all, I do read debian-devel. On Friday 26 May 2006 14:01, Tyler MacDonald wrote: > Paul Johnson <[EMAIL PROTECTED]> wrote: > > On Thursday 25 May 2006 08:30, Manoj Srivastava wrote: > > > Given time, one can pay more attention to each document (I requir

Re: not running depmod at boot time

2006-05-26 Thread Goswin von Brederlow
[EMAIL PROTECTED] (Marco d'Itri) writes: > On May 26, Goswin von Brederlow <[EMAIL PROTECTED]> wrote: > >> No, Im asking to have _one_ delay at a defined point instead of X >> packages having a delay because they might have to run depmod manualy. > This is not a choice, every package which install

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Christian Pernegger
> Stop signing keys for Debian developers, since purchased ID's are acceptable in this community? ;) There's a difference between 'purchase' and 'pay for' in this context. I have always had to pay for any kind of ID card, be it passport, citizen's ID or student ID. You make it sound like he bo

Re: [Debconf-discuss] Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Davide G. M. Salvetti
> MS == Manoj Srivastava [2006-5-26] MS> These are not poor keysigning techniques, unless you accept all ID MS> document verification techniques rely on a gentleman's agreement MS> about not presenting purchased ID's. I think gentlemen don't need ID's, since of course they do not lie when th

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Paul Johnson
On Friday 26 May 2006 00:29, Florian Weimer wrote: > * Manoj Srivastava: > > I will not be signing his keys, ever, based on this action of > > what I consider to be bad faith. Based on discussion with other > > people who seem to find this action amusing, but not unacceptable, I > > fin

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Paul Johnson
On Friday 26 May 2006 00:50, Josselin Mouette wrote: > Le jeudi 25 mai 2006 à 02:36 -0500, Manoj Srivastava a écrit : > > It has come to my attention that Martin Kraff used an > > unofficial, and easily forge-able, identity device at a large key > > signing party recently. > > FWIW, I'm p

Re: [Debconf-discuss] Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Paul Johnson
On Friday 26 May 2006 15:20, Ron Johnson wrote: > Javier Fernández-Sanguino Peña wrote: > > On Thu, May 25, 2006 at 05:45:42PM -0700, Paul Johnson wrote: > >> On Thursday 25 May 2006 15:26, Mike Hommey wrote: > > [snip] > > > [0] As long as he doesn't go and vote too, since the people in the voting

Re: proposal for a more efficient download process

2006-05-26 Thread Tyler MacDonald
> I. the reason why i suggest a patch-oriented download process +1. We've been using bsdiff (http://www.daemonology.net/bsdiff/) at work for some internal stuff and it's great. Furthermore, since unstable has gone to using diffs for the Packages files, my dselect updates have been *way* fa

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Paul Johnson
On Friday 26 May 2006 15:27, Ron Johnson wrote: > Paul Johnson wrote: > > On Thursday 25 May 2006 08:30, Manoj Srivastava wrote: > >> Given time, one can pay more attention to each document (I require at > >> least two photo ID's issued by the government). > > > > WTF? In Oregon, if you have a dri

Re: RFC: Better portability for package maintainers

2006-05-26 Thread Michael Banck
Heya, On Thu, May 25, 2006 at 11:20:26PM +0200, Josselin Mouette wrote: > Le mercredi 24 mai 2006 à 16:01 -0700, Erast Benson a écrit : > > Thanks for all replies. > > In a private email you sent me, you said you were going to stop posting > on Debian mailing lists. This was just another lie. >

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Gunnar Wolf
Paul Johnson dijo [Fri, May 26, 2006 at 08:06:40AM -0700]: > On Thursday 25 May 2006 08:30, Manoj Srivastava wrote: > > Given time, one can pay more attention to each document (I require at least > > two photo ID's issued by the government). > > WTF? In Oregon, if you have a driver's license, yo

Re: [Debconf-discuss] Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Paul Johnson
On Friday 26 May 2006 10:33, Gunnar Wolf wrote: > Some countries that have shaky relations with others usually agree to > stamp you an extra sheet, so that your passport does not show the fact > you were to that country. I have seen this both in Cuba and in > Israel. About the only way for an Ame

Re: Please revoke your signatures from MartinKraff's keys

2006-05-26 Thread Paul Johnson
On Friday 26 May 2006 13:40, Joe Smith wrote: > Apparently the US makes it very clear that US Citizens are not to be > pestered at customs > "OR ELSE". If only that were true. The Americans give me hell. Canada practically waves me through. Last time I drove back to Oregon, US customs decide

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Paul Johnson
On Friday 26 May 2006 18:34, Russ Allbery wrote: > Paul Johnson <[EMAIL PROTECTED]> writes: > > On Thursday 25 May 2006 08:30, Manoj Srivastava wrote: > >> Given time, one can pay more attention to each document (I require at > >> least two photo ID's issued by the government). > > > > WTF? In Ore

Re: proposal for a more efficient download process

2006-05-26 Thread Goswin von Brederlow
Tyler MacDonald <[EMAIL PROTECTED]> writes: > http://www.daemonology.net/bsdiff/ How does that compare with rsync batch files? MfG Goswin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-26 Thread Steve Langasek
On Fri, May 26, 2006 at 03:45:24PM -0700, Thomas Bushnell BSG wrote: > Manoj Srivastava <[EMAIL PROTECTED]> writes: > >> What would you suggest instead? > > Stop signing keys for Debian developers, since purchased ID's > > are acceptable in this community? ;) At this point, I am not sure

Re: proposal for a more efficient download process

2006-05-26 Thread Goswin von Brederlow
Tyler MacDonald <[EMAIL PROTECTED]> writes: > +1. We've been using bsdiff (http://www.daemonology.net/bsdiff/) at > work for some internal stuff and it's great. Oh, and one more thing: | bsdiff is quite memory-hungry. It requires max(17*n,9*n+m)+O(1) | bytes of memory, where n is the size

<    1   2