Re: Key signing practicalities Was: status of PGP support in Maven

2008-09-28 Thread Craig L Russell
Hi Janne, I will be traveling to Helsinki within the next 6 months (probably). If you're on tripit you can watch for my trip (in case I forget for some reason to let you know). Craig On Sep 23, 2008, at 11:36 PM, Janne Jalkanen wrote: So you assume that that www.apache.org can not be hac

Re: Key signing practicalities Was: status of PGP support in Maven

2008-09-24 Thread Niclas Hedhman
On Wed, Sep 24, 2008 at 2:36 PM, Janne Jalkanen <[EMAIL PROTECTED]>wrote: > So you assume that that www.apache.org can not be hacked? What if a >> signing key *IS* in KEYS but not signed by anyone (because the developer >> has never attended an Apache key signing event)? >> > > Which reminds me -

Re: Key signing practicalities Was: status of PGP support in Maven

2008-09-24 Thread David Crossley
Janne Jalkanen wrote: > > > >So you assume that that www.apache.org can not be hacked? What if a > >signing key *IS* in KEYS but not signed by anyone (because the > >developer > >has never attended an Apache key signing event)? > > Which reminds me - if one does not attend an Apache key signing

Re: Key signing practicalities Was: status of PGP support in Maven

2008-09-24 Thread Jukka Zitting
Hi, On Wed, Sep 24, 2008 at 8:36 AM, Janne Jalkanen <[EMAIL PROTECTED]> wrote: > Any people near Helsinki, Finland who are willing to have a coffee and sign > my key? ;-) I'll be in Helsinki for two weeks after the ApacheCon US. BR, Jukka Zitting ---

Key signing practicalities Was: status of PGP support in Maven

2008-09-24 Thread Janne Jalkanen
So you assume that that www.apache.org can not be hacked? What if a signing key *IS* in KEYS but not signed by anyone (because the developer has never attended an Apache key signing event)? Which reminds me - if one does not attend an Apache key signing event (which tend to be in faraway co