[Bug 379] difficult to find the openssh code signing key on openssh.org.

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed May 14 23:16:18 EST 2003


http://bugzilla.mindrot.org/show_bug.cgi?id=379

marcel.kuiper at nl.abnamro.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WONTFIX                     |



------- Additional Comments From marcel.kuiper at nl.abnamro.com  2003-05-14 23:16 -------
Appearantly there's a lot of people spending a large amount of time (or give up 
on it) finding this key. (The keyservers do you no good if you don't know that 
you need Damien Miller's key -- a search for openssh returns Karl Friedl)
There is no valid reason to make it so hard. In fact, quite the contrary I 
would say. Internet security would benefit if you would make it easy (most OSS 
web sites provide links and instructions on signature verification)
How hard can it be to add a small section to the openssh web site?

Marcel



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-unix-dev mailing list