Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[] Fwd: [cbi-dev] PGP and p2 signature strategy

FYI for the planning council in case you haven't seen this already.

Jonah Graham
Kichwa Coders

---------- Forwarded message ---------
From: Mickael Istria <mistria@xxxxxxxxxx>
Date: Thu, 21 Oct 2021 at 07:54
Subject: [cbi-dev] PGP and p2 signature strategy
To: P2 developer discussions <p2-dev@xxxxxxxxxxx>, Common-build Developers discussion <cbi-dev@xxxxxxxxxxx>

Hi all,

Here is a document that describes the strategy that has been implemented to allow PGP signatures as a valid replacement to jarsigner to ensure installed artifacts comes from trusted sources:

Feedback welcome!

Mickael Istria
Eclipse IDE developer, for Red Hat Developers
cbi-dev mailing list
To unsubscribe from this list, visit

Back to the top