Re: [Savannah-hackers] Feature suggestion: GPG key exchange

[Nic Ferrier]

> I'm very concerned that if we had a mechanism for listing keys on
> savannah that people would trust it more than they should.  Given that
> anyone who can intercept your email can hijack your savannah account,
> it's sort of pointless.

You mean the email accepting the user's registration?

I guess that's true. Perhaps we could ask for keys to be submitted when
user's are registered, that way we can send the mail encrypted with the key?
If the user doesn't submit a key when they register then they won't be
allowed to submit a key.

A keyring is a good idea, but I think savannah is a very useful place to
store keys as well, purely because of it's SSL protected nature.


Nic