[Popcon-developers] Encrypted popcon submissions

Paul Wise pabs at debian.org
Sat Jun 22 03:37:00 UTC 2013


On Fri, Jun 21, 2013 at 11:08 PM, Bill Allombert wrote:

> I upload popularity-contest 1.58 which add support for encrypted submissions.
...
> Once this feature has seen proper testing, we will activate it by default.
...
>   * popularity-contest now report the dpkg Vendor field. This will allow to
> track submission by derivative distribution.
>
>   * popularity-contest now trucate the reported atime and ctime to multiple of
> 12 hours to reduce information leak.

I wonder if the release team would accept a backport of these features
to popcon in stable/oldstable. GPG and time truncation are security
enhancements and reporting the dpkg Vendor field is very useful and
has no risks. Once GPG is tested, would you consider doing a
stable/oldstable update before the next point release?

-- 
bye,
pabs

http://wiki.debian.org/PaulWise



More information about the Popcon-developers mailing list