New Key Repo Locations

[Axel Thimm]

On Fri, Aug 29, 2008 at 12:15:23AM -0400, Warren Togami wrote:
> Jeroen van Meeuwen wrote:
>> I'm not sure how that solves the net install use case, especially if  
>> mirrormanager is going to redirect to os.newkey/, as signatures used on 
>> os.newkey/ packages will not meet what the installer expects the  
>> signature to be on these files.
>>
>
> You misunderstand the New Key plan.  Mirrormanager for the existing  
> repos fedora, updates and updates-testing will not redirect to the new  
> location.  Please read the plan again carefully.

Hi,

where can this plan be read, I didn't see it in this list or any URL
pointing to it.

W/o knowing all details, why not move os to os.oldkey and use os as
the new key's content? If the key is considered compromised what
mirror admin would like to keep the old signed packages around anyhow?
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/rel-eng/attachments/20080829/bcffd021/attachment.bin