* "Robin H. Johnson" <robb...@gentoo.org>: > > BTW: About a third of the Manifests are signed [1]. We didn't improve > > [1] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest.png > > [2] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/ratio_2005.png > > [3] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest2.png > Nice graphs. Can you show them over a larger timespan?
Yes, I recreated them from cvs and the keys available now. [1] and [3] show the progress for the last year and [4] the history since May 2004. - In Jan 2008 the transition to Manifest2 was finished and all signatures were dropped. - I guess [2] didn't "require-cross-certification" while gnupg now defaults to "require-cross-certification". So the number of valid signatures in [4] is lower than in [2]. After the "Manifest2"-break the level is lower. [4] http://dev.gentoo.org/~tove/stats/gentoo-x86/Manifest/Manifest-all.png