Bug#968051: Please include direct links to PGP public keys where possible

2020-08-07 Thread Paul Wise
On Fri, Aug 7, 2020 at 12:00 PM Steve McIntyre wrote:

> Maybe we could/should link to direct lookups on keyring.d.o if that's
> possible, or use WKD somehow (hand-wave)?

The HKPS URL could be used for this:

https://keyring.debian.org/pks/lookup?op=get&search=0x10460DAD76165AD81FBC0CE9988021A964E6EA7D
https://tools.ietf.org/html/draft-shaw-openpgp-hkp-00#section-3.4

AFAICT the WKD stuff doesn't have lookups based on key fingerprint.

Probably also listing commands to download the keys would be good:

gpg --verbose --recv-keys --keyserver hkps://keyring.debian.org '1046
0DAD 7616 5AD8 1FBC  0CE9 9880 21A9 64E6 EA7D'

-- 
bye,
pabs

https://wiki.debian.org/PaulWise



Bug#968051: Please include direct links to PGP public keys where possible

2020-08-07 Thread Steve McIntyre
Package: www.debian.org
Severity: normal

Hi,

Now that keyservers are not so useful any more, it's probably a good
plan to directly publish public keys in the various places where we
list key IDs / fingerprints etc.:

 * DAM in /intro/organization
 * CD signing keys in /CD/verify
 * Security team in /security/faq (currently links to a keyserver)
 * (maybe others?)

Maybe we could/should link to direct lookups on keyring.d.o if that's
possible, or use WKD somehow (hand-wave)?

-- System Information:
Debian Release: 10.5
  APT prefers stable-debug
  APT policy: (500, 'stable-debug'), (500, 'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-10-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled



Fw: University of Texas ftp server

2020-08-07 Thread Holger Wansing
Forwarding to mirror-team



Date: Thu, 6 Aug 2020 13:16:58 + (UTC)
From: Norman Brown 
To: "debian-www@lists.debian.org" 
Subject: University of Texas ftp server


Hello,
FYI I encountered the following when I attempted to update my Sid system 
yesterday:

| 
 |
|  | 
** |
|  |  NOTICE: The ftp.utexas.edu service will be discontinued as of August 5, |
|  |  2020. All mirrored content will be removed from this server as of |
|  |  that date, and the server itself will be shut down on November 5, |
|  |  2020. |
|  | 
* |
| 



 | Regards,
Norman Brown |




-- 
Holger Wansing 
PGP-Fingerprint: 496A C6E8 1442 4B34 8508  3529 59F1 87CA 156E B076