On Wed, Jul 10, 2002 at 06:35:17PM -0400, Charles Wilson wrote: >Christopher Faylor wrote: > > >>(I've got to implement a way for package maintainers to do this >>themselves...) >> > >Yep. If you only focus on auto-upload (with some sort of >verification...should we start signing things with GPG keys?) of >*existing* package, that should make the problem easier. > >First-time uploads can be handled as now: folks with login accounts do >it manually.
I have always been thinking of using some kind of ssh key for a standard account. Each key would only let the user access a specific directory. cgf
