package signing

Jason L Tibbitts III tibbs at math.uh.edu
Tue May 30 15:08:07 UTC 2006


>>>>> "JU" == Jonathan Underwood <jonathan.underwood at gmail.com> writes:

JU> Excuse my ignorance, but I was wondering what it is about package
JU> signing that means it can't be automated.

One would expect that the signing keys are held in devices not
normally connected to computers except in the moment of signing and
protected by memorized passphrases, or somesuch secure system.  That
would be not be conducive to automation.

 - J<




More information about the fedora-extras-list mailing list