Hello, for the record I just deployed some steps forward with this.
Done: - there is now no Person.fpr field, but a Fingerprint model with a ForeignKey to Person. - Fingerprint model changes are audited like Person changes are. - There can be more than one key per person but only one can be the active key. - Keys cannot be changed once a person has an entry in LDAP. Still to do: - Key verification still needs to be implemented. Enrico -- GPG key: 4096R/E7AD5568 2009-05-08 Enrico Zini <[email protected]>
signature.asc
Description: Digital signature

