Re: [tor-bugs] #13407 [Tor bundles/installation]: Transition smoothly away from Erinn's signing key for the coming releases

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#13407: Transition smoothly away from Erinn's signing key for the coming releases
------------------------------------------+--------------------------------
     Reporter:  gk                        |      Owner:  erinn
         Type:  task                      |     Status:  new
     Priority:  normal                    |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  security,
Actual Points:                            |  usability
       Points:                            |  Parent ID:
------------------------------------------+--------------------------------

Comment (by gk):

 Replying to [comment:1 lunar]:
 > I'm strongly in favor of creating a role key and continue to sign files
 individually.

 1. How should we handle that role key in a sane way given how distributed
 we are?
 2. What are the blockers you see for giving all users the full benefits of
 reproducible builds?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13407#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs