[tor-bugs] #31032 [Internal Services/Service - deb.tpo]: Use narrowly-scoped signing keys in instructions for using torproject apt repository

Mon Jul 1 05:21:23 UTC 2019

#31032: Use narrowly-scoped signing keys in instructions for using torproject apt
repository
-------------------------------------------------+------------------------
 Reporter:  dkg                                  |          Owner:  weasel
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Service - deb.tpo  |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:                                       |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+------------------------

Comment (by weasel):

 Do you have any suggestions on how to migrate existing setups, in
 particular wrt to the deb.torproject.org-keyring package?  I'm all for no
 longer shipping (or installing) ```/etc/apt/trusted.gpg.d/deb.torproject
 .org-keyring.gpg```.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31032#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online