Re: An idea for keysigning (related to Breaking Cliques at Events)

2017-12-17 Thread Daniel Kahn Gillmor
Hi Elena-- On Sun 2017-12-17 11:19:28 +0100, Elena ``of Valhalla'' wrote: > Of course it should start with the usual Reading of the Hash etc., then > people would split in small groupsĀ¹ (6 people?) and have 20 minutes to > do the ID Dance, but most importantly introduce themselves and talk to >

Re: Get your free Yubikey sponsored by Infomaniak (available for free for any DD and DM)

2018-04-16 Thread Daniel Kahn Gillmor
On Tue 2018-04-17 00:39:41 +0900, Norbert Preining wrote: >> problematic. How do you handle it during this transition? > > I have my expired key available on my computer, and the active subkey > only on the Yubikey I use. That means I can still decrypt old > messages etc, but for signing and

Re: Get your free Yubikey sponsored by Infomaniak (available for free for any DD and DM)

2018-04-16 Thread Daniel Kahn Gillmor
On Sun 2018-04-15 15:49:09 +0200, Thomas Goirand wrote: > The keys support storing 3 4096 bits subkeys, for auth, encryption and > signing. You're not supposed to store your master key in the Yubikey, > instead you'd just save the master key far away in a safe place. The > only issue is that then,

hardware tokens and subkey rotation [was: Re: Get your free Yubikey sponsored by Infomaniak (available for free for any DD and DM)]

2018-04-16 Thread Daniel Kahn Gillmor
On Mon 2018-04-16 22:23:57 +0200, Thomas Goirand wrote: > Easy: we just make the new subkeys on a new Yubikey, and keep 2 keys for > a short time (a month or 2, which is enough for the Debian keymaster to > update the keys). That's ok because we have lots of spare Yubikeys. I > guess it should be

subkey rotation [was: Re: Get your free Yubikey sponsored by Infomaniak (available for free for any DD and DM)]

2018-04-17 Thread Daniel Kahn Gillmor
On Tue 2018-04-17 09:52:56 +0800, gustavo panizzo wrote: > I would advise you against generating new subkeys, after some years your > public key will be a mess (like mine, 0x44BB1BA79F6C6333), as you cannot > never remove expired/revoked keys from the public part. What's the problem here? is it

Re: [OT] Re: Debconf in Israel

2019-03-29 Thread Daniel Kahn Gillmor
On Thu 2019-03-28 07:18:45 +0100, John Paul Adrian Glaubitz wrote: > Virtually any wealth that was accumulated through illegal business is > confiscated by legal prosecutors and either kept by the government or > - if the rightful owners can be determined - returned to them. This is a remarkably

Re: uploading keys where to?

2019-07-30 Thread Daniel Kahn Gillmor
On Mon 2019-07-29 23:24:38 +0200, Martin wrote: > On 2019-07-29 16:57, Daniel Kahn Gillmor wrote: >> If you're just talking about getting the people you communicate with via >> e-mail to have a copy of your own OpenPGP certificate, i recommend using >> an Autocrypt-c

Re: uploading keys where to?

2019-07-29 Thread Daniel Kahn Gillmor
On Mon 2019-07-29 20:30:08 +, Holger Levsen wrote: > what's the current best practise for uploading (ones own) keys? For what purpose? For refreshing metadata on OpenPGP certificates on the debian keyring, or for transitioning to a new OpenPGP certificate in Debian, the guidance is here: