Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-27 Thread Gunnar Wolf
Ana Guerrero dijo [Thu, Jun 25, 2009 at 12:04:37PM +0200]: On Tue, Jun 23, 2009 at 06:23:31PM -0700, Russ Allbery wrote: For example, I think US drivers' licenses are only verifiable by someone who's lived in that state or otherwise seen drivers' licenses from that state. I really dislike

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-26 Thread Philipp Kern
On 2009-06-25, Bernd Eckenfels bernd...@eckenfels.net wrote: In article 20090625100437.ga10...@ana.debian.net you wrote: FWIW, you will see plenty of national ID from all the european countries in DebConf. I do expect most of germans, frenchs, italian, belgian, etc just travelling with their

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-26 Thread Cyril Brulebois
Philipp Kern tr...@philkern.de (26/06/2009): On 2009-06-25, Bernd Eckenfels bernd...@eckenfels.net wrote: European ID cards are more like a passport, whereas a US ID is a driver license. (In addition to that national driver licenses of european countries are much less usefull for this

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-26 Thread Gunnar Wolf
David Moreno dijo [Thu, Jun 25, 2009 at 09:27:28AM -0400]: Driving licenses are expressly not accepted as official ID documents in Mexico, even if they are government-issued. That just begs the question: official to whom, and why? Official for the government for procedures such as state

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread Ana Guerrero
On Tue, Jun 23, 2009 at 06:23:31PM -0700, Russ Allbery wrote: For example, I think US drivers' licenses are only verifiable by someone who's lived in that state or otherwise seen drivers' licenses from that state. I really dislike seeing people use them at key signings and would rather see

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-25 Thread Philipp Kern
On Wed, Jun 24, 2009 at 09:30:52AM +0800, Paul Wise wrote: Would subkeys help in this scenario? (hint hint, some good docs about real-world subkey usage are needed). Subkeys cannot (to my knowledge) be used for certification (i.e. key signing). At least not with stock gnupg. Kind regards,

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread Enrico Zini
On Thu, Jun 25, 2009 at 12:04:37PM +0200, Ana Guerrero wrote: FWIW, you will see plenty of national ID from all the european countries in DebConf. I do expect most of germans, frenchs, italian, belgian, etc just travelling with their cards. They do not need their passports to come. I do

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread David Moreno
On Jun 24, 2009, at 5:43 PM, Peter Eisentraut wrote: On Wednesday 24 June 2009 16:58:52 Gunnar Wolf wrote: Driving licenses are expressly not accepted as official ID documents in Mexico, even if they are government-issued. That just begs the question: official to whom, and why? Official

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread Bernd Eckenfels
In article 20090625100437.ga10...@ana.debian.net you wrote: FWIW, you will see plenty of national ID from all the european countries in DebConf. I do expect most of germans, frenchs, italian, belgian, etc just travelling with their cards. They do not need their passports to come. European ID

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-24 Thread Bernd Eckenfels
In article 20090624003554.gf9...@kunpuu.plessy.org you wrote: that would be very welcome. This whole discussion confuses me and I do not understand if Debian as a project accepts signatures that are not based on a passport or an ID card. For instance, I have used drivers licenses or social

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-24 Thread Simon Richter
On Tue, Jun 23, 2009 at 08:52:20PM +0200, martin f krafft wrote: Additional metadata, e.g. number and expiration date would be helpful. Actually that'd be illegal in Germany -- ID numbers of identification documents may not be stored in databases, with exactly two exceptions: - the issuing

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-24 Thread Sami Liedes
On Tue, Jun 23, 2009 at 07:55:57PM -0700, Don Armstrong wrote: On Tue, 23 Jun 2009, Russ Allbery wrote: For example, I think US drivers' licenses are only verifiable by someone who's lived in that state or otherwise seen drivers' licenses from that state. Nah; there's a guide

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-24 Thread Gunnar Wolf
Russ Allbery dijo [Tue, Jun 23, 2009 at 06:23:31PM -0700]: I will always challenge the government-issued ID due to the vastly differing standards across the globe, but travel document is actually a term that someone uttered earlier, which raises the bar a lot higher. For example, I

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-24 Thread Peter Eisentraut
On Wednesday 24 June 2009 16:58:52 Gunnar Wolf wrote: Driving licenses are expressly not accepted as official ID documents in Mexico, even if they are government-issued. That just begs the question: official to whom, and why? Ultimately, the office clerk, the bar tender, or the key signer

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread martin f krafft
also sprach Daniel Kahn Gillmor d...@fifthhorseman.net [2009.06.23.1949 +0200]: -- govt-iss...@wot.debian.org might be a distinguished name identifying the apparent issuer of any validated identification, such as /C=US/ST=NY/ for a NY State (USA) driver's license and /C=US/ for an American

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Daniel Kahn Gillmor
On 06/23/2009 02:52 PM, martin f krafft wrote: Additional metadata, e.g. number and expiration date would be helpful. This would certainly be useful from the smiting perspective, but might raise privacy concerns if people don't want their passport number (or whatever) bound to their OpenPGP

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Charles Plessy
Le Tue, Jun 23, 2009 at 08:52:20PM +0200, martin f krafft a écrit : On the other hand, just some clear guidelines that participants HAVE TO abide by, would help, e.g. a commitment to a signing policy for all keys that are to appear in a Debian keyring. Hi Martin, that would be very welcome.

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Russ Allbery
martin f krafft madd...@debconf.org writes: I will always challenge the government-issued ID due to the vastly differing standards across the globe, but travel document is actually a term that someone uttered earlier, which raises the bar a lot higher. For example, I think US drivers'

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Russ Allbery
Charles Plessy ple...@debian.org writes: that would be very welcome. This whole discussion confuses me and I do not understand if Debian as a project accepts signatures that are not based on a passport or an ID card. For instance, I have used drivers licenses or social security cards as well,

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Paul Wise
On Wed, Jun 24, 2009 at 3:14 AM, Daniel Kahn Gillmord...@fifthhorseman.net wrote: I think that misses a critical point; i want to use my OpenPGP key for a variety of purposes both in and out of debian.  I consider it a baseline tool for managing my digital identity.  While i'm happy to obey

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Don Armstrong
On Tue, 23 Jun 2009, Russ Allbery wrote: For example, I think US drivers' licenses are only verifiable by someone who's lived in that state or otherwise seen drivers' licenses from that state. Nah; there's a guide published[1] which has all of them. [If you're a bar tender or a notary, you

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Bernd Eckenfels
In article 20090624025557.gb9...@rzlab.ucr.edu you wrote: I imagine that we can arrange to have a copy of that or a similar book around for people to compare. And a UV lamp (at least one for money checking, but a special one for documents is even better, they have different wavelength. Eurpean