Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-27 Thread Daniel Kahn Gillmor
On Mon 2016-06-27 13:46:16 -0400, Wouter Verhelst wrote: > On Mon, Jun 27, 2016 at 05:12:42PM +0200, Nicolas Braud-Santoni wrote: > >> https://debian-administration.org/users/dkg/weblog/97 > > He makes some valid points, but that doesn't necessarily mean we should > drop comments in lists of ke

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-27 Thread Wouter Verhelst
On Mon, Jun 27, 2016 at 05:12:42PM +0200, Nicolas Braud-Santoni wrote: > On Mon, Jun 27, 2016 at 02:05:18PM +0200, Wouter Verhelst wrote: > > > > It's too late for this now, but for future reference: > > [...] > > note the "XMPP only" bit on some of the UIDs; i.e., I don't (often) read > > mail >

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-27 Thread Nicolas Braud-Santoni
On Mon, Jun 27, 2016 at 02:05:18PM +0200, Wouter Verhelst wrote: > > It's too late for this now, but for future reference: > [...] > note the "XMPP only" bit on some of the UIDs; i.e., I don't (often) read mail > sent there. > > Comments *are* part of the UID, and should *not* be dropped. Hi, S

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-27 Thread Wouter Verhelst
On Thu, Jun 23, 2016 at 11:12:15AM +1000, Aníbal Monsalve Salazar wrote: > https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.txt > https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.txt.sha256 > https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.txt.sha256.asc It's too late for this now, but f

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-22 Thread Aníbal Monsalve Salazar
On Mon, 2016-06-13 20:29:51 +1000, Aníbal Monsalve Salazar wrote: > > There was detected a short key ID attack, with the same user IDs. > Please be very careful when you sign keys. > > Curently, I have 62 keys listed at [1]: > >1 ed25519 >1 rsa3072 > 60 rsa4096 > > [1] https:/

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-15 Thread Stefano Rivera
Hi Aníbal (2016.06.15_12:15:59_+0200) > Yes! We'll kindly ask the organizers to read and project it every > morning. There is no morning session in the schedule. But we can announce it at the opening, and I've asked Gunnar to give an introduction talk to the continuous keysigning, somewhere near

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-15 Thread Gunnar Wolf
Steven Chamberlain dijo [Wed, Jun 15, 2016 at 10:34:48AM +0100]: > Hi, > > Michael Meskes wrote: > > Ah, shoot, my plane only touches down at 13:45 on the 4th, that might > > be tough. > > This is a problem with reading the hashes only at a single event. > > At DebConf15 the hashes were repeated

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-15 Thread Bernelle Verster
hi On Wed, Jun 15, 2016 at 12:15 PM, Aníbal Monsalve Salazar wrote: > On Wed, 2016-06-15 12:08:01 +0200, Michael Meskes wrote: >>> only the hash of the document containing all the fingerprints >>> will be read aloud (ideally by everyone reading a single number >>> (*) of the hash), not everyones

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-15 Thread Aníbal Monsalve Salazar
On Wed, 2016-06-15 12:08:01 +0200, Michael Meskes wrote: >> only the hash of the document containing all the fingerprints >> will be read aloud (ideally by everyone reading a single number >> (*) of the hash), not everyones fingerprint. >> >> (*) numbers obviously include ABCDEF. > > Well, the em

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-15 Thread Michael Meskes
> only the hash of the document containing all the fingerprints will be > read aloud (ideally by everyone reading a single number (*) of the > hash), not everyones fingerprint. > > (*) numbers obviously include ABCDEF. Well, the email also had a link explaining the proceedings as everyone reads t

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-15 Thread Holger Levsen
On Wed, Jun 15, 2016 at 10:18:02AM +0200, Michael Meskes wrote: > With all people reading their keys, there won't be much time left for > your presentation though. only the hash of the document containing all the fingerprints will be read aloud (ideally by everyone reading a single number (*) of t

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-15 Thread Steven Chamberlain
Hi, Michael Meskes wrote: > Ah, shoot, my plane only touches down at 13:45 on the 4th, that might > be tough. This is a problem with reading the hashes only at a single event. At DebConf15 the hashes were repeated in the morning briefings. That's not conventional; it is possible someone could

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-15 Thread Michael Meskes
> > As I will be talking on Monday about some ideas / suggestions for > > our GPG WoT network strengthening, Anibal suggested me by private > > mail to have a reading of the SHA256 during my session -- Which I > > will. With all people reading their keys, there won't be much time left for your pre

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Aníbal Monsalve Salazar
On Tue, 2016-06-14 11:06:16 -0500, Gunnar Wolf wrote: > Holger Levsen dijo [Tue, Jun 14, 2016 at 08:49:41AM +]: >> On Tue, Jun 14, 2016 at 10:34:12AM +0200, Julian Andres Klode wrote: And then I wonder, when will the party take place anyway, https://debconf16.debconf.org/schedule/ doe

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Gunnar Wolf
Holger Levsen dijo [Tue, Jun 14, 2016 at 08:49:41AM +]: > On Tue, Jun 14, 2016 at 10:34:12AM +0200, Julian Andres Klode wrote: > > > And then I wonder, when will the party take place anyway, > > > https://debconf16.debconf.org/schedule/ does not list it :( > > I'd say: Always, like last year? >

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Holger Levsen
On Tue, Jun 14, 2016 at 07:09:29PM +1000, Aníbal Monsalve Salazar wrote: > Last year dkg scheduled a session and we publish it during that > session. so why don't you ask the organizers to schedule a session now, in advance? or to phrase it differently: please ask the organizers to schedule a se

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Aníbal Monsalve Salazar
On Tue, 2016-06-14 08:59:42 +, Holger Levsen wrote: > On Tue, Jun 14, 2016 at 06:53:35PM +1000, Aníbal Monsalve Salazar wrote: >> If it's an inconvenience for you, please send me a signed email >> message with your key fingerprint. Same deal applies to anyone >> with a similar problem. > > th

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Jonathan McDowell
On Mon, Jun 13, 2016 at 05:51:59PM +, shirish शिरीष wrote: > While I understand the web of trust which is one of the major parts of > keysigning and the process is detailed at > https://www.debian.org/events/keysigning . Where it fails me is that > WoT has little or no value to a person who doe

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Holger Levsen
On Tue, Jun 14, 2016 at 06:53:35PM +1000, Aníbal Monsalve Salazar wrote: > If it's an inconvenience for you, please send me a signed email > message with your key fingerprint. Same deal applies to anyone with > a similar problem. thanks, to which address? > > And then I wonder, when will the par

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Aníbal Monsalve Salazar
On Tue, 2016-06-14 08:21:36 +, Holger Levsen wrote: > On Mon, Jun 13, 2016 at 08:29:51PM +1000, Aníbal Monsalve Salazar wrote: >> [0] https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.html > > I'd probably participate if I could send my key with gpg > --send-keys $special_keyserver like it is

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Jonathan McDowell
On Tue, Jun 14, 2016 at 11:29:08AM +0800, gustavo panizzo (gfa) wrote: > On Mon, Jun 13, 2016 at 12:24:42PM -0500, Gunnar Wolf wrote: > > Aníbal Monsalve Salazar dijo [Mon, Jun 13, 2016 at 09:36:50PM +1000]: > > > >(...) > > > > Curently, I have 62 keys listed at [1]: > > > > > > > >1 ed255

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Holger Levsen
On Tue, Jun 14, 2016 at 10:34:12AM +0200, Julian Andres Klode wrote: > > And then I wonder, when will the party take place anyway, > > https://debconf16.debconf.org/schedule/ does not list it :( > I'd say: Always, like last year? the party must be kicked off with some event where everybody agrees

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Bernelle Verster
hi On Tue, Jun 14, 2016 at 10:34 AM, Julian Andres Klode wrote: > On Tue, Jun 14, 2016 at 08:21:36AM +, Holger Levsen wrote: >> On Mon, Jun 13, 2016 at 08:29:51PM +1000, Aníbal Monsalve Salazar wrote: >> > [0] https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.html >> >> I'd probably partici

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Julian Andres Klode
On Tue, Jun 14, 2016 at 08:21:36AM +, Holger Levsen wrote: > On Mon, Jun 13, 2016 at 08:29:51PM +1000, Aníbal Monsalve Salazar wrote: > > [0] https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.html > > I'd probably participate if I could send my key with gpg --send-keys > $special_keyserver l

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-14 Thread Holger Levsen
On Mon, Jun 13, 2016 at 08:29:51PM +1000, Aníbal Monsalve Salazar wrote: > [0] https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.html I'd probably participate if I could send my key with gpg --send-keys $special_keyserver like it is done at other key signing parties prepared by other DDs. [0] j

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-13 Thread gustavo panizzo (gfa)
On Mon, Jun 13, 2016 at 12:24:42PM -0500, Gunnar Wolf wrote: > Aníbal Monsalve Salazar dijo [Mon, Jun 13, 2016 at 09:36:50PM +1000]: > > >(...) > > > Curently, I have 62 keys listed at [1]: > > > > > >1 ed25519 > > >1 rsa3072 > > > 60 rsa4096 > > > > > > If you have an ed25519

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-13 Thread Gunnar Wolf
shirish शिरीष dijo [Mon, Jun 13, 2016 at 05:51:59PM +]: > Hi all, > > I have a query - > > While I understand the web of trust which is one of the major parts of > keysigning and the process is detailed at > https://www.debian.org/events/keysigning . Where it fails me is that > WoT has little

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-13 Thread Steven Chamberlain
Hi, shirish शिरीष wrote: > Is there any other compelling reason for non-technical, contributors > having no upload rights to use WoT , apart from being part of an > awesome developer's key ? In the reverse direction: meeting developers who are in the WoT and receiving their key fingerprint in p

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-13 Thread shirish शिरीष
Hi all, I have a query - While I understand the web of trust which is one of the major parts of keysigning and the process is detailed at https://www.debian.org/events/keysigning . Where it fails me is that WoT has little or no value to a person who doesn't want or have any uploading rights to th

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-13 Thread Gunnar Wolf
Aníbal Monsalve Salazar dijo [Mon, Jun 13, 2016 at 09:36:50PM +1000]: > >(...) > > Curently, I have 62 keys listed at [1]: > > > >1 ed25519 > >1 rsa3072 > > 60 rsa4096 > > > > If you have an ed25519 key and would like to include it in the DC16 > > keyring, send me a signed mes

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa

2016-06-13 Thread Aníbal Monsalve Salazar
On Mon, 2016-06-13 20:29:51 +1000, Aníbal Monsalve Salazar wrote: > DebConf16: Last Call for keys for keysigning in Cape Town, South > Africa > > As part of the 17th Debian Conference in Cape Town, South Africa > there will be OpenPGP (pgp/gpg) keysignings. If you intend to > participate in the Deb