X-Original-To: alpine-devel@lists.alpinelinux.org Delivered-To: alpine-devel@mail.alpinelinux.org Received: from ncopa-desktop.alpinelinux.org (unknown [79.160.13.133]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: n@tanael.org) by mail.alpinelinux.org (Postfix) with ESMTPSA id E89B8DC01C6; Mon, 24 Nov 2014 08:17:21 +0000 (UTC) Date: Mon, 24 Nov 2014 09:17:18 +0100 From: Natanael Copa To: Timo Teras Cc: Orion , alpine-devel@lists.alpinelinux.org Subject: Re: [alpine-devel] APK Key Size - Request to move from 1024 to 2048 Message-ID: <20141124091718.2577ad04@ncopa-desktop.alpinelinux.org> In-Reply-To: <20141124081902.7581aa35@vostro> References: <20141122031340.4fb94395@twinpeaks.my.domain> <20141123124614.1fde186c@vostro> <20141123215745.372787f1@twinpeaks.my.domain> <20141124081902.7581aa35@vostro> X-Mailer: Claws Mail 3.11.0 (GTK+ 2.24.23; x86_64-alpine-linux-musl) X-Mailinglist: alpine-devel Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit On Mon, 24 Nov 2014 08:19:02 +0200 Timo Teras wrote: > On Sun, 23 Nov 2014 21:57:45 -0800 > Orion wrote: > > > Also I still can't find the signatures for the ISO releases or a > > signature of the hashes. > > Unfortunately no. This is something we should do (or more like, should > have been doing for a long time). I think doing detached PGP-signatures > like others would be the way to go. > > ncopa, any thoughts? I agree with you. We should have done it long time ago. Not that it is an excuse but gnupg-2.0 had portability issues with musl (or more precice, PTH had). Now that gnupg-2.1 is out, there are not even bad excuses for not doing it. I created issue #3541 as a reminder. http://bugs.alpinelinux.org/issues/3541 Thanks! -nc --- Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org Help: alpine-devel+help@lists.alpinelinux.org ---