Re: Potential Summary: Keysigning in times of COVID-19

2020-08-13 Thread Ángel
Thanks for the summary, Sam. As an 'amicus' of the project, and interested on these topics, I wanted to provide my 2 cents. First of all, you are not the only one with this situation. The issue arises from the vague meaning of a signature on a pgp key, and also appears on other venues when

Re: Keysigning in times of COVID-19

2020-08-13 Thread Paul Wise
On Wed, Aug 12, 2020 at 3:27 PM Pierre-Elliott Bécue wrote: > I'd rather try to solve the issue in a more sensible way : lower the > number of expected GPG signatures to 0 temporarily, and ask for two or > three advocacies from DDs. This seems like the most natural solution to the problem of

Re: Keysigning in times of COVID-19

2020-08-13 Thread Sam Hartman
> "Paul" == Paul Wise writes: Paul> On Wed, Aug 12, 2020 at 3:27 PM Pierre-Elliott Bécue wrote: >> I'd rather try to solve the issue in a more sensible way : lower >> the number of expected GPG signatures to 0 temporarily, and ask >> for two or three advocacies from DDs.

Re: Keysigning in times of COVID-19

2020-08-13 Thread Pierre-Elliott Bécue
Le jeudi 13 août 2020 à 03:36:11+, Paul Wise a écrit : > > This wouldn't solve the broader issue that can arise when one lives in a > > place with no close DD and wants to become a DD themselves. > > Given the "problems" that are being discussed on another thread in > another location, I

Re: Keysigning in times of COVID-19

2020-08-13 Thread Pierre-Elliott Bécue
Le jeudi 13 août 2020 à 14:29:35+0200, Guilhem Moulin a écrit : > Hi, > > On Thu, 13 Aug 2020 at 14:11:14 +0200, Pierre-Elliott Bécue wrote: > > Le jeudi 13 août 2020 à 07:42:29-0400, Sam Hartman a écrit : > >>> "Paul" == Paul Wise writes: > >> > >> Paul> On Wed, Aug 12, 2020 at 3:27 PM

Re: Keysigning in times of COVID-19

2020-08-13 Thread Guilhem Moulin
Hi, On Thu, 13 Aug 2020 at 14:11:14 +0200, Pierre-Elliott Bécue wrote: > Le jeudi 13 août 2020 à 07:42:29-0400, Sam Hartman a écrit : >>> "Paul" == Paul Wise writes: >> >> Paul> On Wed, Aug 12, 2020 at 3:27 PM Pierre-Elliott Bécue wrote: >> >> I'd rather try to solve the issue in a more

Re: Keysigning in times of COVID-19

2020-08-13 Thread Pierre-Elliott Bécue
Le jeudi 13 août 2020 à 07:42:29-0400, Sam Hartman a écrit : > > "Paul" == Paul Wise writes: > > Paul> On Wed, Aug 12, 2020 at 3:27 PM Pierre-Elliott Bécue wrote: > >> I'd rather try to solve the issue in a more sensible way : lower > >> the number of expected GPG signatures to 0

Re: Keysigning in times of COVID-19

2020-08-13 Thread rhkramer
On Wednesday, August 12, 2020 11:36:11 PM Paul Wise wrote: > Given the "problems" that are being discussed on another thread in > another location, I think there is an obvious solution to solve both > issues at the same time, once the COVID situation allows it. ??

Re: Potential Summary: Keysigning in times of COVID-19

2020-08-13 Thread Adam Borowski
On Thu, Aug 13, 2020 at 02:59:59AM +0200, Ángel wrote: > as there would be an external motivation to do that which is financing > such activity. Please note that by 'company' I am not meaning just > business entities, but also three letter agencies, nation states, > malicious hacker groups,

Re: BSP Reimbursements

2020-08-13 Thread Jonathan Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Debianites On 2019/10/02 16:43, Sam Hartman wrote: > TL;DR: Do we want BSP organizers to take on the responsibility of > batching together travel reimbursement requests. > > HI. A while back, I suspended the automatic approval of reimbursement

Re: Potential Summary: Keysigning in times of COVID-19

2020-08-13 Thread Pirate Praveen
On Thu, Aug 13, 2020 at 17:57, Adam Borowski wrote: I don't get where people get the feeling that producing a passport would require a TLA/nation state/organized crime/etc. You can get one for peanuts. I've been offered one once, and I inquired about the details -- for just ~$25

Re: Potential Summary: Keysigning in times of COVID-19

2020-08-13 Thread Steve McIntyre
On Thu, Aug 13, 2020 at 09:03:00PM +0200, Adam Borowski wrote: >On Thu, Aug 13, 2020 at 11:08:01PM +0530, Pirate Praveen wrote: >> I think the point about fake idenity documents is, it being a criminal >> activity and make one liable for prosecution. So it is not just about >> immediate cost of

Re: Potential Summary: Keysigning in times of COVID-19

2020-08-13 Thread Christian Kastner
On 2020-08-13 21:03, Adam Borowski wrote: > I don't think someone could possibly be prosecuted for using a fake passport > to obtain a gpg signature. In many (if not most) jurisdictions, using a fake government ID for any transaction whatsoever is a crime. It's not tied to monetary or any other

Re: Potential Summary: Keysigning in times of COVID-19

2020-08-13 Thread Adam Borowski
On Thu, Aug 13, 2020 at 11:08:01PM +0530, Pirate Praveen wrote: > I think the point about fake idenity documents is, it being a criminal > activity and make one liable for prosecution. So it is not just about > immediate cost of getting a fake id, but the is high risk if you are caught. > Not all

Re: Potential Summary: Keysigning in times of COVID-19

2020-08-13 Thread Ángel
On 2020-08-13 at 17:57 +0200, Adam Borowski wrote: > On Thu, Aug 13, 2020 at 02:59:59AM +0200, Ángel wrote: > > as there would be an external motivation to do that which is financing > > such activity. Please note that by 'company' I am not meaning just > > business entities, but also three letter

Re: Potential Summary: Keysigning in times of COVID-19

2020-08-13 Thread Adam Borowski
On Thu, Aug 13, 2020 at 10:59:47PM +0200, Christian Kastner wrote: > On 2020-08-13 21:03, Adam Borowski wrote: > > I don't think someone could possibly be prosecuted for using a fake passport > > to obtain a gpg signature. > But even if it weren't a crime: Once the person waving the fake ID is >

Re: Keysigning in times of COVID-19

2020-08-13 Thread Ángel
On 2020-08-13 at 16:43 +0200, Pierre-Elliott Bécue wrote: > > gpg has a `--ask-cert-expire` flag and a `--default-cert-expire` > > option in that effect. Expired certification signatures will be > > ignored when building the Web of Trust. > > > > Cheers > > This could work, but we'd have to