Return-Path: Delivered-To: apmail-incubator-general-archive@www.apache.org Received: (qmail 96415 invoked from network); 24 Sep 2008 07:49:20 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 24 Sep 2008 07:49:19 -0000 Received: (qmail 74056 invoked by uid 500); 24 Sep 2008 07:49:15 -0000 Delivered-To: apmail-incubator-general-archive@incubator.apache.org Received: (qmail 73938 invoked by uid 500); 24 Sep 2008 07:49:15 -0000 Mailing-List: contact general-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: general@incubator.apache.org Delivered-To: mailing list general@incubator.apache.org Received: (qmail 73927 invoked by uid 99); 24 Sep 2008 07:49:15 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 24 Sep 2008 00:49:15 -0700 X-ASF-Spam-Status: No, hits=0.2 required=10.0 tests=RCVD_IN_DNSWL_LOW,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: local policy) Received: from [66.111.4.25] (HELO out1.smtp.messagingengine.com) (66.111.4.25) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 24 Sep 2008 07:48:15 +0000 Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id CF16115B6D9 for ; Wed, 24 Sep 2008 03:48:45 -0400 (EDT) Received: from heartbeat1.messagingengine.com ([10.202.2.160]) by compute1.internal (MEProxy); Wed, 24 Sep 2008 03:48:45 -0400 X-Sasl-enc: LGukPowxypouAbxMdo6mcLkoS6F56j50AImS3UCxFxAA 1222242524 Received: from localhost (dsl-41-216.nsw1.net.au [125.168.41.216]) by mail.messagingengine.com (Postfix) with ESMTPSA id 748029E32 for ; Wed, 24 Sep 2008 03:48:44 -0400 (EDT) Date: Wed, 24 Sep 2008 17:48:40 +1000 From: David Crossley To: general@incubator.apache.org Subject: Re: Key signing practicalities Was: status of PGP support in Maven Message-ID: <20080924074840.GE14889@igg.indexgeo.com.au> References: <5c902b9e0809191011u72e8b83arfd6e49c5fc202214@mail.gmail.com> <1221930522.25066.161.camel@forge.local> <25aac9fc0809220712o45d61244i20b54c80347041ab@mail.gmail.com> <1222234030.24030.106.camel@forge.local> <48D9D1EC.5020406@rowe-clan.net> <1222235656.24030.115.camel@forge.local> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i X-Virus-Checked: Checked by ClamAV on apache.org Janne Jalkanen wrote: > > > >So you assume that that www.apache.org can not be hacked? What if a > >signing key *IS* in KEYS but not signed by anyone (because the > >developer > >has never attended an Apache key signing event)? > > Which reminds me - if one does not attend an Apache key signing event > (which tend to be in faraway countries, traveling to which usually > means parting with lots of cash), how *does* one get the key signed? > Is there a regional list somewhere? Not all committers have added themselves to people.apache.org ... ASF Committer Map http://people.apache.org/map.html See other notes about key signing so that you are ready when you do meet someone ... https://svn.apache.org/repos/private/committers/docs/pgp-key-signing.txt -David > Any people near Helsinki, Finland who are willing to have a coffee > and sign my key? ;-) > > /Janne > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org > For additional commands, e-mail: general-help@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org For additional commands, e-mail: general-help@incubator.apache.org