<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> Bill Crawford escreveu: <blockquote cite="mid:544eb990809010240p1546c34k4a6d8d813745f112@mail.gmail.com" type="cite"> <pre wrap="">On 30/08/2008, Bojan Smojver <a class="moz-txt-link-rfc2396E" href="mailto:bojan@rexursive.com"><bojan@rexursive.com></a> wrote: </pre> <blockquote type="cite"> <pre wrap="">Just for completeness, yum could alternatively accept say 5 keys from the pool (but no Fedora key), so that any compromise of the central key does not cause the current "change the Fedora key" hoopla. Simply resign by others and continue. </pre> </blockquote> <pre wrap=""> What might be good, is only signing packages with one or two keys, but only allowing those keys' public parts to be updated in rpm database (or wherever) if signed by a much larger number of keys, which would be owned by some trusted people from the fedora project. Then automated rollover could be done by simply providing a new "keyring" in updates. </pre> </blockquote> BTW, updates are still frozen. What's the schedule for the normalization of yum services? Will it be necessary a special procedure to be adopted by users? Best regards, CdAB </body> </html>