Hi Wouter, On 8/25/21 8:36 PM, Wouter Verhelst wrote: > On Mon, Aug 23, 2021 at 04:12:43AM +0000, Paul Wise wrote: >> On Sun, Aug 22, 2021 at 2:31 PM Aivar Annamaa wrote: >> >>> Is here someone, who can meet me in Tartu, Estonia or is willing to >>> arrange this over the internet? Perhaps I could sign a statement about >>> my identity with Estonian ID card? >> >> I checked the list of lists of Debian locations and there are no >> Debian members that list their location as Estonia. It generally isn't >> accepted to sign keys over the internet or other electronic means. > > Disagree. Why would that be the case? > > By signing an OpenPGP key you certify that you are sufficiently > convinced that the key's holder is who they say they are, and that they > control their key. The easiest way to do that is to meet someone in > person, but that doesn't mean it's the *only* possible way.
That is correct, but it varies from Developer to deveoper. Some folks would agree here, while others would not want to sign keys w/o meeting in-person - this is on coherence with the long-ish discussion on -project discussion, which you can find here[1] regarding keysigning in times of COVID. That said, Key Endorsements solve this situation to a large extent[2] if not completely. [1]: https://lists.debian.org/debian-project/2020/08/msg00000.html [2]: https://lists.debian.org/debian-devel-announce/2020/11/msg00003.html
OpenPGP_signature
Description: OpenPGP digital signature
