On Fri, Mar 25, 2011 at 10:33 AM, Michał Górny wrote: > On Fri, 25 Mar 2011 08:15:32 +0100 Torsten Veller wrote: >> - keys are revoked [3] > > How about manifests signed before the key was revoked?
you cant do this at commit time (computers cant predict the future), so it has no bearing on the original idea people who need to revoke their key are responsible for either notifying the Gentoo community of the issue and verifying that all the commits in the tree before their revocation were actually made by them -mike
