[arch-general] Package signing for the umpteenth time (was Re: unrealircd 3.2.8.1-2 contains backdoor)

[Xavier Chantry]

On Sun, Jun 13, 2010 at 11:38 AM, Ananda Samaddar <ananda at samaddar.co.uk> wrote:
>
> This is the reason why we need package signing for Pacman.  I'm aware
> that some progress has been made and it's being worked on.  Are there
> any updates?
>

It's all there : http://projects.archlinux.org/users/allan/pacman.git/log/?h=gpg
and there :
http://wiki.archlinux.org/index.php/Package_Signing_Proposal_for_Pacman

Come back to us when everything is implemented and working :)

You can also read the last thread :
http://mailman.archlinux.org/pipermail/arch-general/2010-April/012897.html
And contact Denis A. Altoé Falqueto about pacman-key and all the rest,
and maybe Aleksis Jauntēvs too

Basically there is no one leading and coordinating these efforts, just
various people who pushed it a bit at random time in the past, and got
quickly de-motivated by the lack of interest from everyone else.