GPG key really needed?

Elliot Lee sopwith at redhat.com
Mon Jan 16 16:50:18 UTC 2006


On Fri, 13 Jan 2006, Patrick Barnes wrote:

> > say "You can sign the CLA".  If it's required, we should change it to
> > "must sign the CLA".
> >   
> They read "can" and not "must" due to the option of using a written
> signature and postal courier.  CLAs may also not be necessary in all cases.

Posting/FAXing the CLA is not an option any more. People must use the
account system, so the wording should be 'must'.

> Part of it is availability.  It is likely that more use of GPG keys will
> be made in the future.

Exactly - besides the CLA, the main reason to collect GPG key ids is their
potential value in the future.

Best,
-- Elliot
Red Hat Summit Nashville (May 30 - June 2, 2006)
http://www.redhat.com/promo/summit/




More information about the fedora-extras-list mailing list