Security farce: Dead Developer still on Debian keyring after 11 years | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

		Security farce: Dead Developer still on Debian keyring after 11 years (debian.community)
		2 points by fsfellowship on Aug 30, 2020 \| hide \| past \| favorite \| 1 comment

jwilk on Sept 3, 2020 [–]

> We went looking for details.

They didn't go very far though.

Steve's key was removed in 2015, because his key was 1024-bit:

https://salsa.debian.org/debian-keyring/keyring/commit/281f3...

Apparently Debian folks learned about Steve's death only in 2016:

https://salsa.debian.org/debian-keyring/keyring/commit/98466...

The part of the project history page about Steve was added in 2020:

https://salsa.debian.org/ddp-team/project-history/commit/e93...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact