From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 3D05C43D32 for ; Mon, 8 Aug 2022 15:43:26 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 111A968B73A; Mon, 8 Aug 2022 18:43:23 +0300 (EEST) Received: from relay7-d.mail.gandi.net (relay7-d.mail.gandi.net [217.70.183.200]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id BCBDC68B45D for ; Mon, 8 Aug 2022 18:43:16 +0300 (EEST) Received: (Authenticated sender: michael@niedermayer.cc) by mail.gandi.net (Postfix) with ESMTPSA id 0FA0720008 for ; Mon, 8 Aug 2022 15:43:15 +0000 (UTC) Date: Mon, 8 Aug 2022 17:43:15 +0200 From: Michael Niedermayer To: FFmpeg development discussions and patches Message-ID: <20220808154315.GV2088045@pb2> References: <20220808145008.26162-1-michael@niedermayer.cc> <20220808145008.26162-2-michael@niedermayer.cc> <076e72f8-4c7b-3768-228e-c43221e4ac1f@gmail.com> MIME-Version: 1.0 In-Reply-To: <076e72f8-4c7b-3768-228e-c43221e4ac1f@gmail.com> Subject: Re: [FFmpeg-devel] [PATCH 1/2] MAINTAINERS: Add ED25519 key for tag/commit signing experiment X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="===============8093074757331163920==" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: --===============8093074757331163920== Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="L7QcuKEPlEDqpLxW" Content-Disposition: inline --L7QcuKEPlEDqpLxW Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Aug 08, 2022 at 12:16:36PM -0300, James Almer wrote: > On 8/8/2022 11:50 AM, Michael Niedermayer wrote: > > From: Michael Niedermayer > >=20 > > Signed-off-by: Michael Niedermayer > > --- > > MAINTAINERS | 1 + > > 1 file changed, 1 insertion(+) > >=20 > > diff --git a/MAINTAINERS b/MAINTAINERS > > index 7ed15f96f6..ed2ec0b90c 100644 > > --- a/MAINTAINERS > > +++ b/MAINTAINERS > > @@ -626,6 +626,7 @@ Leo Izen (thebombzen) B6FD 3CFC 7ACF 83FC 9= 137 6945 5A71 C331 FD2F A19A > > Loren Merritt ABD9 08F4 C920 3F65 D8BE 35D7 1540 DAA7= 060F 56DE > > Lynne FE50 139C 6805 72CA FD52 1F8D A2FE A5F0= 3F03 4464 > > Michael Niedermayer 9FF2 128B 147E F673 0BAD F133 611E C787= 040B 0FAB > > + DD1E C9E8 DE08 5C62 9B3E 1846 B18E 8928 = B394 8D64 >=20 > There is a "FFmpeg release signing key" key already, used for the tarball= s, > and which you obviously have access to. Can we not use it for the release > tags too, instead of a new key to your name?=20 possible > It would probably require > creating the git tags using the ffmpeg-devel@ffmpeg.org email. If the goal is to get a "verified" sticker on github i think that would req= uire an account on github too that has a gpg key and email of ffmpeg-devel@ffmpe= g.org iam not sure about the security implications if a github account uses a public mailing list on a secondary email address >=20 > This new key of yours could be used for your commits, but for the release > tags, if possible better use the same key the relevant tarball will also > use, IMO. It will simplify package managers that already fetch tarballs to > also fetch git tags as fallback and not require the use of a different key > for verification. >=20 > > Nicolas George 24CE 01CE 9ACC 5CEB 74D8 8D9D B063 D997= 36E5 4C93 > > Niklas Haas (haasn) 1DDB 8076 B14D 5B48 32FC 99D9 EB52 DA9C= 02BA 6FB4 > > Nikolay Aleksandrov 8978 1D8C FB71 588E 4B27 EAA8 C4F0 B5FC= E011 13B1 > _______________________________________________ > ffmpeg-devel mailing list > ffmpeg-devel@ffmpeg.org > https://ffmpeg.org/mailman/listinfo/ffmpeg-devel >=20 > To unsubscribe, visit link above, or email > ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". >=20 --=20 Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB In fact, the RIAA has been known to suggest that students drop out of college or go to community college in order to be able to afford settlements. -- The RIAA --L7QcuKEPlEDqpLxW Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EABEIAB0WIQSf8hKLFH72cwut8TNhHseHBAsPqwUCYvEvDgAKCRBhHseHBAsP qwtJAJ4/LQHG6Va6BAZYy8pLZPwBkT5M7gCggqr2DtuuadB3hwrGRbdFTsKaLqc= =r2vo -----END PGP SIGNATURE----- --L7QcuKEPlEDqpLxW-- --===============8093074757331163920== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --===============8093074757331163920==--