Re: Potential Summary: Keysigning in times of COVID-19

2020-08-12 Thread Ángel
Thanks for the summary, Sam. As an 'amicus' of the project, and interested on these topics, I wanted to provide my 2 cents. First of all, you are not the only one with this situation. The issue arises from the vague meaning of a signature on a pgp key, and also appears on other venues when using

Re: Keysigning in times of COVID-19

2020-08-12 Thread Paul Wise
On Wed, Aug 12, 2020 at 3:27 PM Pierre-Elliott Bécue wrote: > I'd rather try to solve the issue in a more sensible way : lower the > number of expected GPG signatures to 0 temporarily, and ask for two or > three advocacies from DDs. This seems like the most natural solution to the problem of COVI

Re: Expressing regrets for how I handled the transition to Identity Verification in times of COVID-19

2020-08-12 Thread Olek Wojnar
On 8/12/20 8:19 AM, Sam Hartman wrote: > > I'd like to take a moment to express regret and what I've learned that I > can improve with the interaction I had with Olek . I deeply regret that > Olek walked away from that interaction feeling like I was dismissing his > ideas including the idea of exp

Re: Keysigning in times of COVID-19

2020-08-12 Thread Pierre-Elliott Bécue
Le jeudi 06 août 2020 à 17:54:21+0200, Enrico Zini a écrit : > Hello, > > we have people approaching Debian with a lack of GPG signatures, and we > generally cannot ask them to travel and meet other developers in person > to get their key signed. > > Technically, we are not requiring that people

Re: Potential Summary: Keysigning in times of COVID-19

2020-08-12 Thread Jonas Smedegaard
Quoting Sam Hartman (2020-08-12 13:59:07) > Enrico, I find that the sorts of discussions that you've started are > more valuable if someone goes back later and tries to summarize what > we've learned. > So I'm going to take a stab at that. Thanks, Sam - I find such summary quite helpful! ...even

Re: Expressing regrets for how I handled the transition to Identity Verification in times of COVID-19

2020-08-12 Thread Sam Hartman
> "Jonathan" == Jonathan McDowell writes: Jonathan> It's worthwhile stating the actual problem that is trying Jonathan> to be solved here. Jonathan> I believe that is: "Given difficulties with keysigning in Jonathan> the modern environment, what does the project believe is

Re: Potential Summary: Keysigning in times of COVID-19

2020-08-12 Thread Sam Hartman
Enrico, I find that the sorts of discussions that you've started are more valuable if someone goes back later and tries to summarize what we've learned. So I'm going to take a stab at that. I don't think we were seeking a consensus, and we didn't find one. What we did find is a number of appro

Re: Keysigning in times of COVID-19

2020-08-12 Thread Jonathan McDowell
Enrico Zini wrote: > we have people approaching Debian with a lack of GPG signatures, and we > generally cannot ask them to travel and meet other developers in person > to get their key signed. It's worthwhile stating the actual problem that is trying to be solved here. I believe that is: "Given