Hello Matthias, hello NoisyCoil,

Thanks NoisyCoil for you contributions to debian so far \O/, and thank
you Matthias for willing to endorse NoisyCoil's key.
However, I am afraid that, IMO, interacting with someone for two months
is not enough for endorsing their key. Calling an interaction long-term
would mean something like 6 months, at least.

The key endorsements are meant to show a history of the link between a
key and their owner through the contributions. So we expect some more
than a couple of months, sorry. Also, we should probably better document
this, but giving links to some signed contributions also helps to
strength a key endorsement.

And since we are here, for applying to DM it is required to have one key
signature or two strong key endorsements. Do you have any plans on that?

Best regards,

El 18/09/24 a las 18:52, Matthias Geiger (via nm.debian.org) escribió:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> For nm.debian.org, at 2024-09-18:
> For the past two months, I have worked with NoisyCoil on tiny-dfr, dysk and 
> the rust packages
> needed for those tools.
> 
> For this past work, NoisyCoil sent mails using the email address 
> [email protected]
> which is the one they're using on nm.debian.org, and they signed their work 
> and
> email using a GPG key with fingerprint 50CF C9D5 E5BD E1CB CA57  FD7B 6DF0 
> 08E7 0F28 CBF7.
> 
> I've made sure that they are able to decrypt encrypted messages sent to this 
> key
> and that they're able to sign messages with the same key.
> 
> Due to the long-term interactions we had, I'm convinced that NoisyCoil as they
> present themselves on nm.debian.org is the rightful owner of both email
> [email protected] and GPG key 50CF C9D5 E5BD E1CB CA57  FD7B 6DF0 08E7 
> 0F28 CBF7
> -----BEGIN PGP SIGNATURE-----
> 
> iHUEARYIAB0WIQQUWTv/Sl6/b+DpcW7svtu2B7myvgUCZushYgAKCRDsvtu2B7my
> voOwAQD+AR6F19QiI4VLURFHWpHDFBs724ALAJyXEiLNjlE6jAD+IvTVIDxL5ofI
> EDjbFfE+eH9m/tHyLOkCmmriAJT8TQY=
> =DNJZ
> -----END PGP SIGNATURE-----
> 
> Matthias Geiger (via nm.debian.org)
> 
> For details and to comment, visit 
> https://nm.debian.org/fprs/person/noisycoil/50CFC9D5E5BDE1CBCA57FD7B6DF008E70F28CBF7/endorsements/view/
> -- 
> https://nm.debian.org/fprs/person/noisycoil/50CFC9D5E5BDE1CBCA57FD7B6DF008E70F28CBF7/endorsements/view/
> 

Attachment: signature.asc
Description: PGP signature

Reply via email to