Thanks for the summary, Sam.
As an 'amicus' of the project, and interested on these topics, I wanted
to provide my 2 cents.
First of all, you are not the only one with this situation. The issue
arises from the vague meaning of a signature on a pgp key, and also
appears on other venues when using
On Wed, Aug 12, 2020 at 3:27 PM Pierre-Elliott Bécue wrote:
> I'd rather try to solve the issue in a more sensible way : lower the
> number of expected GPG signatures to 0 temporarily, and ask for two or
> three advocacies from DDs.
This seems like the most natural solution to the problem of COVI
On 8/12/20 8:19 AM, Sam Hartman wrote:
>
> I'd like to take a moment to express regret and what I've learned that I
> can improve with the interaction I had with Olek . I deeply regret that
> Olek walked away from that interaction feeling like I was dismissing his
> ideas including the idea of exp
Le jeudi 06 août 2020 à 17:54:21+0200, Enrico Zini a écrit :
> Hello,
>
> we have people approaching Debian with a lack of GPG signatures, and we
> generally cannot ask them to travel and meet other developers in person
> to get their key signed.
>
> Technically, we are not requiring that people
Quoting Sam Hartman (2020-08-12 13:59:07)
> Enrico, I find that the sorts of discussions that you've started are
> more valuable if someone goes back later and tries to summarize what
> we've learned.
> So I'm going to take a stab at that.
Thanks, Sam - I find such summary quite helpful!
...even
> "Jonathan" == Jonathan McDowell writes:
Jonathan> It's worthwhile stating the actual problem that is trying
Jonathan> to be solved here.
Jonathan> I believe that is: "Given difficulties with keysigning in
Jonathan> the modern environment, what does the project believe is
Enrico, I find that the sorts of discussions that you've started are
more valuable if someone goes back later and tries to summarize what
we've learned.
So I'm going to take a stab at that.
I don't think we were seeking a consensus, and we didn't find one. What
we did find is a number of appro
Enrico Zini wrote:
> we have people approaching Debian with a lack of GPG signatures, and we
> generally cannot ask them to travel and meet other developers in person
> to get their key signed.
It's worthwhile stating the actual problem that is trying to be solved
here.
I believe that is: "Given
8 matches
Mail list logo