Re: [Qemu-devel] [PULL v3 00/14] acpi, pc, pci, virtio, memory bug fixes

[Peter Maydell]

On 11 March 2014 11:49, Michael S. Tsirkin <address@hidden> wrote:
> On Tue, Mar 11, 2014 at 11:32:41AM +0000, Peter Maydell wrote:
>> That won't help with removing the warning. What gpg
>> is saying here is "I found this key in the keyring,
>> and the signature checks out, but there's no chain
>> of trust between the person who applied the pull
>> and that key". That is, I haven't signed your key.
>
> Okay ... would you like to sign it?
> Didn't you go to the key signing party at the forum?
> If yes you have all the data :)

At the forum I only signed keys where the other
person had been sufficiently organised to get their
key onto the pre-printed list Anthony sent out and
were clearly following the instructions. (Basically
I wasn't expecting to be applying other peoples'
pull requests at that time so it seemed sufficient
to do a mutual signing with a reasonable number of
developers.) I can't remember why I put a cross next to
your name at this point, but obviously I can't sign
your key now if I didn't choose to do so then; that
would be breaking the whole point of doing in person
checks.

> But the commit log will include the warning forever I think?

True, but does that matter?

thanks
-- PMM