So you really insist in hiding this interesting topic on debian-vote rather to switch to debian-devel? Reply-To was set again to debian-devel ...
On Fri, Mar 22, 2019 at 09:32:55AM +0100, Lucas Nussbaum wrote: > On 21/03/19 at 18:57 +0100, Joerg Jaspert wrote: > > Also, it will be a drastical change and has many far reaching > > consequences and needs lots of work nefore we are near it. > > I'm probably missing something, but it doesn't sound like a lot of work > to me? It's "just" a service that: > - gets notified of the existence of a git repo + tag to upload > - fetches that git repo + tag > - checks signature / confirm that the GPG key owner is allowed to upload > that package > - build a Debian source package > - uses a slightly different path to accept the source package (because > the .dsc and .changes wouldn't be signed) > > This could exist in parallel to the current upload scheme. > > And it's a terrible idea, but it could even be implemented as a > third-party service, run by a DD that would do that and sign+upload the > source package using the DD's own GPG key. > > Lucas > -- http://fam-tille.de
