[Savannah-register-public] [task #5188] Submission of X.509 Cert

[Bernhard Fastenrath]

Follow-up Comment #2, task #5188 (project administration):

Savannah offers a webpage as the access point for CRLs and RSS news, a
mailing list to organize the members of the project, CVS to maintain the
software (a certain amount of software development might be required, e.g. a
program that checks OpenPGP keys and analyses the web of trust) and a secure
environment: The use of ssh keys for CVS appears more secure than e.g.
sourceforge.org. I also suspect that the projects hosted on savannah are a
smaller but more  interesting clientele than e.g. sourceforge.org.
The documentation license would apply to software review policies developed
by the project. A reviewer who vouches for the fitness of a software for a
specific purpose would be able to specify what review policy has been used to
verify the claim and then sign a document that associates the review policy
(by URL) with the software.
The latter signature should probably use OpenPGP so everybody would be able
to verify what amount and what kind of peer review has been given to what
release of a program.


    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/task/?func=detailitem&item_id=5188>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/