Re: Keysigning in times of COVID-19

2020-08-07 Thread Olek Wojnar
Hi Sam, On Fri, Aug 7, 2020 at 3:39 PM Sam Hartman wrote: > > TL;DR: I think without some link back to real world identity, we open > ourselves up to attacks where people build trust only to betray us. > I agree with you that this is a potentially-serious problem. However, I'm not sure that key

Re: Keysigning in times of COVID-19

2020-08-07 Thread Jonas Smedegaard
Quoting Sam Hartman (2020-08-07 23:29:23) > > "Jonas" == Jonas Smedegaard writes: > > Jonas> I feel that you are somewhat quoting me out of context: > > Jonas> For the record, I do *not* find "several months of [remote] > Jonas> collaboration" adequate for trusting an identity.

Re: Keysigning in times of COVID-19

2020-08-07 Thread Sam Hartman
> "Jonas" == Jonas Smedegaard writes: Jonas> I feel that you are somewhat quoting me out of context: Jonas> For the record, I do *not* find "several months of [remote] Jonas> collaboration" adequate for trusting an identity. I simply Jonas> repeated that criterium from the p

Re: Keysigning in times of COVID-19

2020-08-07 Thread Cindy Sue Causey
On 8/7/20, Sam Hartman wrote: > > TL;DR: I think without some link back to real world identity, we open > ourselves up to attacks where people build trust only to betray us. Hi, Everyone.. I've tried to follow some of this conversation but keep getting distracted. I haven't known where to chime

Re: Keysigning in times of COVID-19

2020-08-07 Thread Jonas Smedegaard
Quoting Sam Hartman (2020-08-07 21:14:10) > > TL;DR: I think without some link back to real world identity, we open > ourselves up to attacks where people build trust only to betray us. > > > "Jonas" == Jonas Smedegaard writes: > > Jonas> Quoting Gerardo Ballabio (2020-08-07 10:34:20) >

Re: Keysigning in times of COVID-19

2020-08-07 Thread Sam Hartman
TL;DR: I think without some link back to real world identity, we open ourselves up to attacks where people build trust only to betray us. > "Jonas" == Jonas Smedegaard writes: Jonas> Quoting Gerardo Ballabio (2020-08-07 10:34:20) >> Johannes Schauer wrote: Jonas> If ok for first

Re: Keysigning in times of COVID-19

2020-08-07 Thread Ulrike Uhlig
Hi, On 07.08.20 15:46, Adrian Bunk wrote: > On Thu, Aug 06, 2020 at 05:54:21PM +0200, Enrico Zini wrote: >> ... >> As DAM, I would have a problem if someone automatically signed the keys >> of every stanger who asked them nicely in an email. At the same time, I >> am open to the idea of policies

Re: Keysigning in times of COVID-19

2020-08-07 Thread Adrian Bunk
On Thu, Aug 06, 2020 at 05:54:21PM +0200, Enrico Zini wrote: >... > Technically, every DD has their own policies for signing keys, >... > It might require to check a government issued photo ID, or it might not. I thought this was the sole fixed requirement for keysigning. >... > As DAM, I would h

Re: Keysigning in times of COVID-19

2020-08-07 Thread Alberto Garcia
On Thu, Aug 06, 2020 at 05:54:21PM +0200, Enrico Zini wrote: > What do you think could be alternative key signing policies, that > would be acceptable to you, that would not require traveling and > meeting face to face? I don't have specific suggestions for a key signing policy but I wrote this so

Re: Keysigning in times of COVID-19

2020-08-07 Thread Jonas Smedegaard
Quoting Alexandre Viau (2020-08-07 05:44:34) > On 2020-08-06 11:54 a.m., Enrico Zini wrote: > > What do you think could be alternative key signing policies, that would > > be acceptable to you, that would not require traveling and meeting face > > to face? > > Hello Enrico :) > > Thank you for br

Re: Keysigning in times of COVID-19

2020-08-07 Thread Didier 'OdyX' Raboud
Le jeudi, 6 août 2020, 17.54:21 h CEST Enrico Zini a écrit : > What do you think could be alternative key signing policies, that would > be acceptable to you, that would not require traveling and meeting face > to face? Several others have eloquently described key signing policies close to mine,

Re: Keysigning in times of COVID-19

2020-08-07 Thread Holger Levsen
On Thu, Aug 06, 2020 at 08:44:57PM +0200, Giovanni Mascellani wrote: > Not to mention that as far as I know there are already DDs whose key > identity does not correspond to any government-given identity. So we > already acknowledge that we don't really care about what is your "legal" > name. thi

Re: Keysigning in times of COVID-19

2020-08-07 Thread Jonas Smedegaard
Quoting Gerardo Ballabio (2020-08-07 10:34:20) > Johannes Schauer wrote: > > So in my opinion (and please correct my assumptions if they are wrong), an > > acceptable key signing policy would also be one, where a prospective DM has > > shown over several months to produce work that is always sign

Re: Keysigning in times of COVID-19

2020-08-07 Thread Gerardo Ballabio
Johannes Schauer wrote: > So in my opinion (and please correct my assumptions if they are wrong), an > acceptable key signing policy would also be one, where a prospective DM has > shown over several months to produce work that is always signed with the same > key and maybe even communicated (fo

Re: Keysigning in times of COVID-19

2020-08-07 Thread Alexandre Viau
On 2020-08-06 11:54 a.m., Enrico Zini wrote: > What do you think could be alternative key signing policies, that would > be acceptable to you, that would not require traveling and meeting face > to face? Hello Enrico :) Thank you for bringing this up. On 2020-08-06 1:26 p.m., Johannes Schauer wr