Mailing-List: contact commons-dev-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jakarta Commons Developers List" <commons-dev@jakarta.apache.org>
Received-SPF: pass (asf.osuosl.org: domain of flamefew@gmail.com designates
 64.233.162.197 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=iNP9bLjM3fSEEj+4HbpLKiYJVWd99aF42MJP1IietvU/zTIaZY+Ba+l6F6X++RxJSt/OreMKl9tMBugMD5B4409YVFvs3qiRupwNZU8tabW1TGcZY49GvytVcxMMdwe2JxDB42efZQ3AadO1FOKR2MW3u/66e5GVRTcL5zWFIMM=
Message-ID: <31cc37360603021450j4fdbb99en3a1a7399306bc168@mail.gmail.com>
Date: Thu, 2 Mar 2006 14:50:13 -0800
From: "Henri Yandell" <flamefew@gmail.com>
To: "Jakarta Commons Developers List" <commons-dev@jakarta.apache.org>
Subject: Re: [all] MD5 and PGP generation [Was: [feedparser] News / Status]
In-Reply-To: <1141339776.5040.60.camel@knossos.elmet>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <25aac9fc0603021052g5dd3ba6ex@mail.gmail.com>
	 <8a81b4af0603021150g532e9258ge8002bd25df76778@mail.gmail.com>
	 <31cc37360603021403q1fe72954p8568507c7bace3c9@mail.gmail.com>
	 <1141339776.5040.60.camel@knossos.elmet>

On 3/2/06, robert burrell donkin <robertburrelldonkin@blueyonder.co.uk> wro=
te:
> On Thu, 2006-03-02 at 14:03 -0800, Henri Yandell wrote:
> > Yeah, running it isn't really the problem. Managing the key when you
> > don't use it for email is the bit that got painful.
>
> you don't really need to do any key management (unless you want to). a
> key used for code signing can just be get safe on removable media until
> it's needed.

Yeah, gonna go buy a few usb keys, burn it to a cd etc.

> building a strong web of trust requires key management but even that's
> not too painful if you only do it at apachecon.
>
> > We're not supposed to be using the pgp on minotaur; so my TODO is to
> > figure out how to get my key off of there, hope I still know the
> > passphrase,
>
> i hope so too :)
>
> there are various ways to export the key but copying the files should
> work fine too.

Advice is to revoke it - as who knows what you evil buggers have been
doing to it :)

So am walking through the revocation process and will update the
dev/pgp page with it.

Then I can start doing releases again perhaps.

Hen

---------------------------------------------------------------------
To unsubscribe, e-mail: commons-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-dev-help@jakarta.apache.org