Fedora 25 Final freeze now Over

2016-11-23 Thread Kevin Fenzi
With the release of Fedora 25 yesterday, we are now out of freeze. Note that tomorrow and friday are holidays in the US, so please try and keep things quiet until next week. The next freeze is scheduled to start 2017-02-28 for the run up to Fedora 26 Alpha release. kevin pgpydzKDDeZJP.pgp

Re: Cert penning, Certs and related

2016-11-23 Thread Kevin Fenzi
On Mon, 21 Nov 2016 10:16:55 -0500 Colin Walters wrote: > On Fri, Oct 14, 2016, at 08:42 AM, Colin Walters wrote: > > > > Anyways, there's a higher level question here - you're arguing > > for pinning to Digicert rather than a custom CA. That seems good > > enough, but I

Re: Cert penning, Certs and related

2016-11-23 Thread Colin Walters
On Wed, Nov 23, 2016, at 12:10 PM, Kevin Fenzi wrote: > I suppose thats workable if all the stakeholders agree. To confirm, are you agreeing with: > So I'd propose pinning to a 3 set of CAs: > > - Digicert > - Some other well-regarded CA vendor > - A Fedora-infra custom CA (doesn't have to