[csw-maintainers] [policy] GPG Signing Key handling

[Ben Walton]

Excerpts from Ben Walton's message of Mon Feb 14 21:57:00 -0500 2011:

Proposed revision:

--snip--
The GPG signing key is an important asset for OpenCSW.  It is
currently held by the release manager (a member) and backup release
manager (a maintainer but not a member of the foundation), but by no
members of the board.
 
As a member of OpenCSW, you are asked to make three yes or no
selections, one per board position, to indicate which, if any, of the
board positions you feel should hold a copy of the key.

Please consider that once a person holds the key, there is no way to
officially revoke it from that member on change of office, short of
revoking the key.

Selecting yes for a position indicates that you feel this position
(and consequently the person holding this position from year to year)
should be responsible for holding a copy of the key.  Selecting no
indicates that you do not want this position to hold the key.

Question 1: Should the Secretary position hold the key?  yes/no
Question 2: Should the Treasurer position hold the key?  yes/no
Question 3: Should the President position hold the key?  yes/no
--snip--

Phil: I believe that our members are intelligent enough to understand
      what revoking the key implies.

Thanks
-Ben
--
Ben Walton
Systems Programmer - CHASS
University of Toronto
C:416.407.5610 | W:416.978.4302