Debian Developers - Re: The BTS and bug subscriptions

Author

Re: The BTS and bug subscriptions

Pascal Hakim

2005-07-26, 8:00 am

On Tue, 2005-07-26 at 00:33 +0400, Nikita V. Youshchenko wrote:
>
> Maybe it should honour subscription requests without confirmation if request
> is GPG-signed by the key with uid equal to address being subscribed.
>

I'm afraid this doesn't give us much.

It's trivial to add uids to a GPG key, and headers aren't actually
signed anyway, so you could replay signed messages to the server.

Cheers,

Pasc

--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org