[Matthieu Moy] > Harald Meland <[EMAIL PROTECTED]> writes: > >> Whenever I need to set up signing or signature checking for a new >> archive (or mirror of an archive), I need to work in >> ~/.arch-params/signing/. > > Do you use different signing method for different archives?
Yes. I use GPG to sign the archives I commit to, and use tla's "copy signatures from source archive" feature when mirroring signed archives (both for mirroring my own archives into publically available locations and for mirroring other people's archives to locations nearer me). Additionally, I use per-archive keyrings when checking signatures, and haven't gotten around to make =default.check handle this by itself yet. -- Harald
