[Savannah-dev] [Bug #896] GPG key in account maintenance: whole key needed?

[nobody]

=================== BUG #896: FULL BUG SNAPSHOT ===================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=896&group_id=11

Submitted by: mpt                       Project: Savannah                       
Submitted on: 2002-Jul-23 15:06
Category:  Other                        Severity:  5 - Average                  
Priority:  None                         Bug Group:  None                        
Resolution:  None                       Assigned to:  None                      
Status:  Open                           Effort:  0.00                           

Summary:  GPG key in account maintenance: whole key needed?

Original Submission:  (Using Category 'Other' since no 'User Admin'; hope 
that's OK).

Is "GPG Key" section in Account Maintenance present so that other users can 
fetch my GPG key, or so that Savannah can send me mail using my GPG key, or 
both?

-- If "GPG Key" is present so that other users can get my key, then I suggest 
replacing it with "GPG Fingerprint".  After adding 3rd party signatures to my 
key I don't want to have to manually upload it to Web applications like 
Savannah.  If the account information instead includes a fingerprint, people 
can fetch my key from a public keyserver and use the fingerprint to 
double-check it (not full verification, but to confirm a match between 
key-from-keyserver and desired-key-of-Savannah-user).

-- If "GPG Key" is present so that Savannah itself can send me encrypted mail, 
then that purpose should be documented so that users know they don't need to 
keep their keys on Savannah up-to-date WRT sigatures.




No Followups Have Been Posted




No files currently attached


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=896&group_id=11