[eclipse.org-planning-council] Fwd: [cbi-dev] PGP and p2 signature strat

[Jonah Graham <jonah@xxxxxxxxxxxxxxxx>]

FYI for the planning council in case you haven't seen this already.

~~~
Jonah Graham
Kichwa Coders
www.kichwacoders.com

---------- Forwarded message ---------
From: Mickael Istria <mistria@xxxxxxxxxx>
Date: Thu, 21 Oct 2021 at 07:54
Subject: [cbi-dev] PGP and p2 signature strategy
To: P2 developer discussions <p2-dev@xxxxxxxxxxx>, Common-build Developers discussion <cbi-dev@xxxxxxxxxxx>

Hi all,

Here is a document that describes the strategy that has been implemented to allow PGP signatures as a valid replacement to jarsigner to ensure installed artifacts comes from trusted sources: https://docs.google.com/document/d/1dl10ia092X5hN1qfKoHYvriCNM-iBqiOkfjnntxaBbk/edit?usp=sharing

Feedback welcome!

--

Mickael Istria

Eclipse IDE developer, for Red Hat Developers

_______________________________________________
cbi-dev mailing list
cbi-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/cbi-dev