https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7397

--- Comment #9 from Kevin A. McGrail <[email protected]> ---
> I propose changing sa-update to sa-update-local and sa-update-remote.  

Big +1.  Love this idea.

> I would also suggest that we deprecate support for older GPG

-1 or at least a 0.  I would say you need to support the version shipped with
common OSes likely as far back as at least CentOS 6 and take a look at some of
the LTS OSes.  Is there a security issue solved by this that you can point out?

> I also propose that going forward ONLY the channels.d configuration be used, 
> rather than the older method of accepting just a single channel file 
> structure. This way, the 'import GPG key' funtionality could also be removed 
> from sa-update-remote.  

-1.  There are rulesets being run today using this feature where the keys are
installed by admins. 

-KAM

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to