launchpad-dev team mailing list archive

[Robert Collins <robert.collins@xxxxxxxxxxxxx>]

On Thu, 2009-11-19 at 12:33 +1300, Michael Hudson wrote:
> 
> > 
> > Mark S has suggested that we have a single Launchpad key to sign
> them,
> > so that if the packages are used outside of Launchpad then people
> know
> > where they came from.
> 
> I think that probably makes sense.  Don't know where to do the signing
> though -- maybe the buildd-master could do it? 

I'd be inclined to sign them with the PPA key, for the PPA the build is
targeting.

This implies adding 'PPA' keys for the official archives too (and then
only using them for recipe based builds).

-Rob

Attachment: signature.asc
Description: This is a digitally signed message part