[pkg-gnupg-maint] tag2upload should record git tag signer info in .dsc [and 1 more messages]

[Sean Whitton]

Hello PGP experts,

For the purposes of tag2upload work, would you mind confirming this:

On Tue 23 Jul 2019 at 06:38AM +01, Sean Whitton wrote:

> AIUI a fingerprint fails to uniquely identify a PGP key unless you also
> include the cryptographic algorithm that was used and the key size.  So
> for example, my current key is uniquely identified by writing both 4096R
> and 8DC2487E51ABDD90B5C4753F0F56D0553B6D411B.
>
> Even though it's unlikely we'll get a clash of fingerprints within the
> Debian keyring, it seems the algorithm and keysize ought to be included
> alongside the fingerprint, if the above is right.

-- 
Sean Whitton
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20190726/47b7c09a/attachment-0001.sig>