Poldi for Debian
================

Date: Tue, 04 Feb 2025 09:35:08 +0900
From: NIIBE Yutaka <gniibe@fsij.org>
To: Andreas Tille <tille@debian.org>, 1095076@bugs.debian.org
Subject: Re: Bug#1095076: poldi: Please bring packaging with upstream in sync and maintain the package on Salsa (in debian/ team)

Hello,

Andreas Tille <tille@debian.org> wrote:
> When inspecting the package I realised you are upstream and Debian in
> one person.  When diving a bit into the packaging I realised there where
> a couple of NMUs which provided patches diverging from your upstream
> code.

Thanks for your improvement on Poldi packaging.  It was maintained (or
not-well-maintained, so to say) that way, because there were few
specific requests from users occasionally, and original features were
going questionable day by day (like use of X509 authentication).

Poldi is an old experiment for use of smartcard/token and things are not
modern (from the viewpoint of 2025).  You see the file
poldi/EXPERIMENTAL, which still says "Poldi is still marked as
experimental."

Thus, please go ahead, I don't have any plan for this software and
packaging.  Anyone can take over the package, if interested.  (I don't
recommend to invest energy to the upstream software.)

In upstream (GnuPG Team and GnuPG users with smartcard/token), we
discussed about a replacement of Poldi, and it resulted the 'gpg-auth'
program.  'gpg-auth' covers most use cases of Poldi in a modern way.

        gpg-auth:
        https://dev.gnupg.org/T5862

It is (only) available in GnuPG 2.4.  My idea was that, once GnuPG 2.4
were available in Debian testing, I'd orphan the Poldi package in
Debian.

For GnuPG 2.4, I helped and have been following the debian/experimental
branch of slasa.debian.org/debian/gnupg2

I also noticed Simon's WNPP:
        https://bugs.debian.org/1093026
