Comment 10 for bug 136593

On Fri, Dec 18, 2015 at 09:33:54PM -0000, William Grant wrote:
> On 19/12/15 04:25, Rod Smith wrote:
> > anything with my keys recently). If I'm not mistaken, the e-mail address
> > of the person who submitted the package is in the .changes file, so it
> > should be possible to fire off an e-mail saying that the OpenPGP key
> > didn't check out. This could save newbies, or fumble-fingered folks like
> > myself, much head-banging.
>
> But we can't verify the signature, so anybody could have uploaded that
> email address via anonymous FTP. That's not a spam vector that we can
> sensibly open ourselves up to.

Could we get Launchpad to create a temporary upload-error URL (say 1
week) explaining what was wrong, and somehow have dput issue an error
message containing that URL? That way you don't need to spam, the
notification is synchronous, and the end-user can learn what is wrong.

I assume the hard part is getting dput to relay the error -- is there
some way of having the server provide an error message verbatim back?
--
Christian Robottom Reis | [+55 16] 3376 0125 | http://async.com.br/~kiko
                        | [+55 16] 991 126 430 | http://launchpad.net/~kiko