Bill Crawford escreveu:
On 30/08/2008, Bojan Smojver <bojan(a)rexursive.com> wrote:
> Just for completeness, yum could alternatively accept say 5 keys from the
> pool
> (but no Fedora key), so that any compromise of the central key does not
> cause
> the current "change the Fedora key" hoopla. Simply resign by others and
> continue.
>
What might be good, is only signing packages with one or two keys, but
only allowing those keys' public parts to be updated in rpm database
(or wherever) if signed by a much larger number of keys, which would
be owned by some trusted people from the fedora project. Then
automated rollover could be done by simply providing a new "keyring"
in updates.
BTW, updates are still frozen. What's the schedule for the normalization
of yum services? Will it be necessary a special procedure to be adopted
by users?
Best regards,
CdAB