From edzer.pebesma at uni-muenster.de  Mon Mar 10 17:35:17 2014
From: edzer.pebesma at uni-muenster.de (Edzer Pebesma)
Date: Mon, 10 Mar 2014 17:35:17 +0100
Subject: [Rd] Maintainer NOTE in R CMD Check
In-Reply-To: <CABtg=KkaQ68FB+8dR88XOy2-1q7T+wKySCtt22nKhQMOFbTSMg@mail.gmail.com>
References: <42143135B5270A45996065C2EFFC2B59116D9AC4@MBX39.exg5.exghost.com>	<A4E5A0B016B8CB41A485FC629B633CED5BB21CCE07@GOLD.corp.lgc-group.com>	<CAAcGz98wCg0b6DkmdjDFHBuOuB=3bUFqdksZncUuwXYgBC24YA@mail.gmail.com>	<531C4F41.7080602@statistik.tu-dortmund.de>	<CABdHhvEKc64WUotD460kbGf1UkFBxrBKHcc2nC+xdfhixL+V4A@mail.gmail.com>
	<CABtg=KkaQ68FB+8dR88XOy2-1q7T+wKySCtt22nKhQMOFbTSMg@mail.gmail.com>
Message-ID: <531DE9C5.6080708@uni-muenster.de>



On 03/10/2014 04:42 PM, G?bor Cs?rdi wrote:
> On Mon, Mar 10, 2014 at 11:36 AM, Hadley Wickham <h.wickham at gmail.com>wrote:
> 
>>>>> * checking CRAN incoming feasibility ... NOTE
>>>>> Maintainer: 'firstname A B lastname '
>>>
>>>
>>> This is just a Note that reminds CRAN maintainers to check that the
>>> submission comes actually from his maintainer and not anybody else.
>>
>> How does CRAN do that?  Seems like a challenging problem given an
>> anonymous web form upload.
>>
> 
> According to my memories, they send an email to the maintainer's email
> address to confirm the upload. If the email address has changed, they send
> an email to both the new and old addresses.
> 
> If the old address does not exist any more, then it is tricky indeed, and I
> am not sure what you can do in this case.
> 
> Gabor

Besides the effort it would involve, are there reasons why CRAN does not
use a stronger package author identification mechanism, like web of
trust (which debian uses) or public key infrastructure, and require
packages to be signed?


> 
> 
>>
>> Hadley
>>
>> --
>> http://had.co.nz/
>>
>> ______________________________________________
>> R-devel at r-project.org mailing list
>> https://stat.ethz.ch/mailman/listinfo/r-devel
>>
> 
> 	[[alternative HTML version deleted]]
> 
> ______________________________________________
> R-devel at r-project.org mailing list
> https://stat.ethz.ch/mailman/listinfo/r-devel
> 

-- 
Edzer Pebesma
Institute for Geoinformatics (ifgi), University of M?nster
Heisenbergstra?e 2, 48149 M?nster, Germany. Phone: +49 251
83 33081 http://ifgi.uni-muenster.de GPG key ID 0xAC227795

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: OpenPGP digital signature
URL: <https://stat.ethz.ch/pipermail/r-devel/attachments/20140310/87571f6a/attachment.bin>


[Rd] Maintainer NOTE in R CMD Check
Edzer Pebesma