From nobody Fri May 10 21:29:26 2024 X-Original-To: freebsd-hackers@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4VbhqR3TDRz5KSPn for ; Fri, 10 May 2024 21:29:55 +0000 (UTC) (envelope-from junchoon@dec.sakura.ne.jp) Received: from www121.sakura.ne.jp (www121.sakura.ne.jp [153.125.133.21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4VbhqQ4VS7z4fYT for ; Fri, 10 May 2024 21:29:54 +0000 (UTC) (envelope-from junchoon@dec.sakura.ne.jp) Authentication-Results: mx1.freebsd.org; none Received: from kalamity.joker.local (123-1-21-232.area1b.commufa.jp [123.1.21.232]) (authenticated bits=0) by www121.sakura.ne.jp (8.17.1/8.17.1/[SAKURA-WEB]/20201212) with ESMTPA id 44ALTQe1070625; Sat, 11 May 2024 06:29:27 +0900 (JST) (envelope-from junchoon@dec.sakura.ne.jp) Date: Sat, 11 May 2024 06:29:26 +0900 From: Tomoaki AOKI To: David Cross Cc: FreeBSD Hackers Subject: Re: Quick suggestion for upcoming 14.1 and future releases Message-Id: <20240511062926.1616e3fffc90b6ef08a11b8d@dec.sakura.ne.jp> In-Reply-To: <69039247-30D2-4959-BF06-751436D55485@crossfamilyweb.com> References: <69039247-30D2-4959-BF06-751436D55485@crossfamilyweb.com> Organization: Junchoon corps X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.33; amd64-portbld-freebsd14.0) List-Id: Technical discussions relating to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-hackers List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-hackers@FreeBSD.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:7684, ipnet:153.125.128.0/18, country:JP] X-Rspamd-Queue-Id: 4VbhqQ4VS7z4fYT On Fri, 10 May 2024 14:07:35 -0400 David Cross wrote: > It would be really nice to capture the official freebsd pgp keys (at least for the release officers and security officers) into something like /usr/share/pgpkeys/freebsd or something. > > That way on a plain freebsd install one can validate SAs/ENs/Releases without having to first find them on the website, download, etc. and then of course having to redo it every year as they expire. > > This would also necessitate putting them in source control as well, which would give some added transparency when things change. > > Thanks! Or place a link to the Handbook[1]? Or to another[2]? [1] https://docs.freebsd.org/en/books/handbook/pgpkeys/ [2] https://docs.freebsd.org/en/articles/pgpkeys/ -- Tomoaki AOKI