Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-25 Thread Philipp Kern
On Wed, Jun 24, 2009 at 09:30:52AM +0800, Paul Wise wrote: Would subkeys help in this scenario? (hint hint, some good docs about real-world subkey usage are needed). Subkeys cannot (to my knowledge) be used for certification (i.e. key signing). At least not with stock gnupg. Kind regards,

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-24 Thread Bernd Eckenfels
In article 20090624003554.gf9...@kunpuu.plessy.org you wrote: that would be very welcome. This whole discussion confuses me and I do not understand if Debian as a project accepts signatures that are not based on a passport or an ID card. For instance, I have used drivers licenses or social

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-24 Thread Simon Richter
On Tue, Jun 23, 2009 at 08:52:20PM +0200, martin f krafft wrote: Additional metadata, e.g. number and expiration date would be helpful. Actually that'd be illegal in Germany -- ID numbers of identification documents may not be stored in databases, with exactly two exceptions: - the issuing

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread martin f krafft
also sprach Daniel Kahn Gillmor d...@fifthhorseman.net [2009.06.23.1949 +0200]: -- govt-iss...@wot.debian.org might be a distinguished name identifying the apparent issuer of any validated identification, such as /C=US/ST=NY/ for a NY State (USA) driver's license and /C=US/ for an American

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Daniel Kahn Gillmor
On 06/23/2009 02:52 PM, martin f krafft wrote: Additional metadata, e.g. number and expiration date would be helpful. This would certainly be useful from the smiting perspective, but might raise privacy concerns if people don't want their passport number (or whatever) bound to their OpenPGP

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Charles Plessy
Le Tue, Jun 23, 2009 at 08:52:20PM +0200, martin f krafft a écrit : On the other hand, just some clear guidelines that participants HAVE TO abide by, would help, e.g. a commitment to a signing policy for all keys that are to appear in a Debian keyring. Hi Martin, that would be very welcome.

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Paul Wise
On Wed, Jun 24, 2009 at 3:14 AM, Daniel Kahn Gillmord...@fifthhorseman.net wrote: I think that misses a critical point; i want to use my OpenPGP key for a variety of purposes both in and out of debian.  I consider it a baseline tool for managing my digital identity.  While i'm happy to obey