[JIRA] (JPAR-199) Validate key 0xE0130A3ED5A2079E for org.webjars.gpg

[Rod Widdowson (Jira)]

Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) *commented* on JPAR-199 ( https://shibboleth.atlassian.net/browse/JPAR-199?atlOrigin=eyJpIjoiZGM2MDY3MWNjMzcxNGQ2ZGEyMTFjZDg0MTg2OTI2ZjMiLCJwIjoiaiJ9 )

Re: Validate key 0xE0130A3ED5A2079E for org.webjars.gpg ( https://shibboleth.atlassian.net/browse/JPAR-199?atlOrigin=eyJpIjoiZGM2MDY3MWNjMzcxNGQ2ZGEyMTFjZDg0MTg2OTI2ZjMiLCJwIjoiaiJ9 )

My approach to this has always been that a key is an individual thing. So in his case he should put the key on his personal web site (not the site for the aggregation). If I used my key for things other than Shibboleth stuff I’d make sure it was available somewhere personal to me (or more likely use a different one).

I did once get a snooty mail back saying “Yea that’s my key, but support questions should go to this google group”. but that's an outlier. If someone asked me where my sig was I’d point to it (because it’s my email in the key, not some “singerdaemon at shibboleth.net” email)

My over all feeling is that people need educated. They follow a recipe because otherwise they cannot get their job done, but they don’t understand the why. But I am not sure how much time we have for education - I just note that this is far from the first time I’ve been asked the question

( https://shibboleth.atlassian.net/browse/JPAR-199#add-comment?atlOrigin=eyJpIjoiZGM2MDY3MWNjMzcxNGQ2ZGEyMTFjZDg0MTg2OTI2ZjMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JPAR-199#add-comment?atlOrigin=eyJpIjoiZGM2MDY3MWNjMzcxNGQ2ZGEyMTFjZDg0MTg2OTI2ZjMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:81e38da )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/10667de5/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-eb32529e-8711-46fa-af2b-497660336831
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/10667de5/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-60a97868-28a9-490b-b9a7-e31d11b76723
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/10667de5/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-54927626-2942-43c2-a148-407b0772b687
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/10667de5/attachment-0005.png>