[gnutls-devel] GnuTLS | Discussion: tarball signing practice (#1407)

[Read-only notification of GnuTLS library development activities]

Daiki Ueno created an issue: https://gitlab.com/gnutls/gnutls/-/issues/1407



We recently [started](https://gitlab.com/gnutls/web-pages/-/issues/3) signing release tarballs with multiple keys. As that imposes some overhead in the release process, it might need further discussion.

- Do we want to keep this practice (multiple signatures)? What are the benefits and drawbacks?
- Is the keyring management good enough?
- Can we simplify the process by automation, e.g., by signing with a vault key shared by multiple people as in libreswan?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1407
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20220927/e4e69e41/attachment.html>