Signing the CoC doesn't work

Bug #286 reported by Matthias Urlichs
6
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
Medium
Celso Providelo

Bug Description

The usual -- "A System Error occurred".

NB: Do I upload a signed version of the file?
Signed or clearsigned? Or just the detached signature?

I'd advocate the latter -- much easier to paste into the text field

The usual -- "A System Error occurred".

NB: Do I upload a signed version of the file?
Signed or clearsigned? Or just the detached signature?

I'd advocate the latter -- much easier to paste into the text field. In any case, please explicitly state which GPG command line to use for signing.

Revision history for this message
Celso Providelo (cprov) wrote :

I hope you can get those issues solved after patch-1552, when I've add better comments and gpg command line hint.

Morgan Collett (morgan)
Changed in doap:
assignee: nobody → name101
Celso Providelo (cprov)
Changed in launchpad:
status: New → Accepted
Revision history for this message
Celso Providelo (cprov) wrote :

The current version running seems to have this issue fixed, could you please confirm it ?

Revision history for this message
Matthias Urlichs (smurf) wrote :

Works now. Thanks.

Revision history for this message
Matthias Urlichs (smurf) wrote : Re: Clearsigning vs. detached signatures

A detached sig incorporates the to-be-signed text by reference (its sha1sum), so it should be no problem.

My point is that copy+paste of a huge blob of text is error-prone and doesn't work well for some people (just *how* would you insert a multi-kbyte text into the few lines that a text-only browser shows you? What would a blind person do?) while a detached sig is short enough that you can type it in if necessary, and verify that it's correct.

Revision history for this message
Matthias Urlichs (smurf) wrote : Re: Clearsigning again

One more thought: If you decide not to allow detached signatures (or maybe even if you do), you should offer an "Upload" button for the clearsigned file.

Revision history for this message
Celso Providelo (cprov) wrote :

All good points Matthias, accessibility is an issue that should be discussed soon and widely than GPG/CoC stuff, sorting "somehow disabled" people facilities integrated in entire LP.
The UPLOAD button suggestion is quite good and I'll keep this bug openned to remember me about that.
About deatached signatures, I doupt, since, for legal pourposes, having the digest isn't the same than have the clearsigned text, of course it's MHO; but be patient, I'll propose this topic soon in our discussion, maybe the GNUPG gurus have some relevant reason.

Revision history for this message
Christian Reis (kiko) wrote :

Celso, why don't you close out this bug and file new ones on the remaining features or bugs?

Celso Providelo (cprov)
Changed in launchpad:
status: Accepted → Fixed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.