Esteemed net-snmp coders,

Data
-------
On the net-snmp download page (http://www.net-snmp.org/download.html), the 
download link for the gpg key (http://www.net-snmp.org/net-snmp-admin.asc) 
points to a file containing the older, expired pubkeys:

     PS> gpg --import .\net-snmp-admin.asc
     gpg: key FFEF09D7: public key "Net-SNMP Administrators 
<net-snmp-ad...@lists.sourceforge.net>" imported
     gpg: key 317F8F64: public key "Net-SNMP Administrators 
<net-snmp-adm...@lists.sourceforge.net>" imported
     gpg: Total number processed: 2
     gpg:               imported: 2
     gpg: no ultimately trusted keys found

But the current version is signed by the current valid key.:

     PS> gpg --verify .\net-snmp-5.6.1.1-1.x86.exe.asc
     gpg: Signature made 08/09/11 11:42:20 Eastern Daylight Time using RSA key 
ID A77C5329
     gpg: Can't check signature: No public key

And while keyservers have the new pubkey, it is signed only by itself.

Request
------------
Kindly consider:
1. Providing an updated pubkey on the download page
2. Providing some web-of-trust toehold on the new keys by having some other 
keys sign it-or at least by signing each new key with the previous key before 
it expires.

Thanks for your work to provide an unsurpassed SNMP implementation. It has made 
my life better.


Michael

michael.canne...@secure-24.com 
   

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to