Hello,

Jonathan Dowland [10/Feb 10:17pm GMT] wrote:
> Congratulations on tag2upload GA!

Thanks!

> I've done some initial experimentation with it and I've got a quick
> question.
>
> tag2upload created a signed tag (archive/debian/3.20260201-2 for
> ikiwiki) signed by one of the service keys,
> 374D8CE4DB96E9CBD4C0972A606D084E4683C079, which I can get from the
> package debian-tag2upload-keyring -- has there been any discussion about
> shipping this in debian-keyring?
>
> The key has two signatures,
>
> sig          2AE5E34C84B4B055 2025-03-14  [User ID not found]
> sig          E3E3392348B50D39 2025-03-14  [User ID not found]
>
> 0xE3E3392348B50D39 is Ian and would normally be in debian-keyring but
> was dropped in the version in sid for some (likely temporary) reason.
>
> The other (2AE5E34C84B4B055) I can't find anywhere. It would be nice
> (although, by no means essential) if I could build a trust path to the
> key. Mostly for curiosity. Can anyone point me at the owner of
> 2AE5E34C84B4B055?

noodles has answered about this.  The latest version of the key in sid
is also certified by my DD key.

-- 
Sean Whitton

Attachment: signature.asc
Description: PGP signature

Reply via email to