Re: DAM Key and identity requirements

2020-09-28 Thread Gunnar Wolf
Mattia Rizzolo dijo [Thu, Sep 24, 2020 at 11:45:48AM +0200]: > > > * Minimum key size and acceptable algorithms are actually the domain of > > >keyring-maint, and we just check those for them. > > >At the time of writing this, a new key must be larger than 1024bits, > > >ideally at

Re: DAM Key and identity requirements

2020-09-24 Thread Mattia Rizzolo
On Thu, 24 Sep 2020, 10:51 am Bastian Blank, wrote: > Hi Enrico > > On Sun, Sep 13, 2020 at 09:11:04AM +0200, Enrico Zini (DAM) wrote: > > * Minimum key size and acceptable algorithms are actually the domain of > >keyring-maint, and we just check those for them. > >At the time of

Re: DAM Key and identity requirements

2020-09-24 Thread Pirate Praveen
On Thu, Sep 24, 2020 at 10:34, Bastian Blank wrote: * An encryption subkey must be present, since various parts of our infrastructure require it. Which parts? While encryption subkeys are useful, I can't see anything _requiring_ this. As part of NM process, some details are sent

Re: DAM Key and identity requirements

2020-09-24 Thread Bastian Blank
Hi Enrico On Sun, Sep 13, 2020 at 09:11:04AM +0200, Enrico Zini (DAM) wrote: > * Minimum key size and acceptable algorithms are actually the domain of >keyring-maint, and we just check those for them. >At the time of writing this, a new key must be larger than 1024bits, >ideally at

Re: DAM Key and identity requirements

2020-09-15 Thread Joerg Jaspert
On 15892 March 1977, Michael Richardson wrote: > A natural person may only have one identity in Debian. > This was effectively enforced before by requiring cross-signing > keys, > and relying on people doing the cross-signing to have key > signing > policies strong

Re: DAM Key and identity requirements

2020-09-15 Thread Michael Richardson
Enrico Zini (DAM) wrote: > A natural person may only have one identity in Debian. > This was effectively enforced before by requiring cross-signing keys, > and relying on people doing the cross-signing to have key signing > policies strong enough to reliably connect a key to a

Re: DAM Key and identity requirements

2020-09-13 Thread Didier 'OdyX' Raboud
Le dimanche, 13 septembre 2020, 09.11:04 h CEST Enrico Zini (DAM) a écrit : > Hello everyone, > > world-wide changes due to COVID-19 prompted us to conduct a long-overdue > review of the GPG key requirements for people applying for Debian > Maintainer (DM) and Debian Developer (DD) membership