> No action is needed (or possible) from PPA owners
This is so wrong. I need to include the new key in my keyring package for my PPA, then ideally have a time in which both keys are used to sign the repo to allow for rollover and for users to obtain the new key, for which I need the new key ahead of time.
I didn’t even get any communication about this except by asking on d-devel replying to the announcement, where I was just told “Canonical is handling it according to” (the same URL).
Which… may have rather low values of “handling” if this is all still unclear…
Hah!
> No action is needed (or possible) from PPA owners
This is so wrong. I need to include the new key in my keyring package for my PPA, then ideally have a time in which both keys are used to sign the repo to allow for rollover and for users to obtain the new key, for which I need the new key ahead of time.
I didn’t even get any communication about this except by asking on d-devel replying to the announcement, where I was just told “Canonical is handling it according to” (the same URL).
Which… may have rather low values of “handling” if this is all still unclear…