Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-27 Thread Gunnar Wolf
Ana Guerrero dijo [Thu, Jun 25, 2009 at 12:04:37PM +0200]: > On Tue, Jun 23, 2009 at 06:23:31PM -0700, Russ Allbery wrote: > > For example, I think US drivers' licenses are only verifiable by someone > > who's lived in that state or otherwise seen drivers' licenses from that > > state. I really di

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-26 Thread Gunnar Wolf
David Moreno dijo [Thu, Jun 25, 2009 at 09:27:28AM -0400]: > >> Driving licenses are expressly not accepted as official ID documents > >> in Mexico, even if they are government-issued. > > > > That just begs the question: official to whom, and why? > > Official for the government for procedures su

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread David Moreno
On Jun 24, 2009, at 5:43 PM, Peter Eisentraut wrote: > On Wednesday 24 June 2009 16:58:52 Gunnar Wolf wrote: >> Driving licenses are expressly not accepted as official ID documents >> in Mexico, even if they are government-issued. > > That just begs the question: official to whom, and why? Offici

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread Enrico Zini
On Thu, Jun 25, 2009 at 12:04:37PM +0200, Ana Guerrero wrote: > FWIW, you will see plenty of national ID from all the european countries > in DebConf. I do expect most of germans, frenchs, italian, belgian, etc just > travelling with their cards. They do not need their passports to come. I do int

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-25 Thread Philipp Kern
On Wed, Jun 24, 2009 at 09:30:52AM +0800, Paul Wise wrote: > Would subkeys help in this scenario? (hint hint, some good docs about > real-world subkey usage are needed). Subkeys cannot (to my knowledge) be used for certification (i.e. key signing). At least not with stock gnupg. Kind regards, Phi

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread Ana Guerrero
On Tue, Jun 23, 2009 at 06:23:31PM -0700, Russ Allbery wrote: > For example, I think US drivers' licenses are only verifiable by someone > who's lived in that state or otherwise seen drivers' licenses from that > state. I really dislike seeing people use them at key signings and > would rather see

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread Peter Eisentraut
On Wednesday 24 June 2009 16:58:52 Gunnar Wolf wrote: > Driving licenses are expressly not accepted as official ID documents > in Mexico, even if they are government-issued. That just begs the question: official to whom, and why? Ultimately, the office clerk, the bar tender, or the key signer wi

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-25 Thread Paul Wise
On Wed, Jun 24, 2009 at 3:14 AM, Daniel Kahn Gillmor wrote: > I think that misses a critical point; i want to use my OpenPGP key for a > variety of purposes both in and out of debian.  I consider it a baseline > tool for managing my digital identity.  While i'm happy to obey > debian-specific guid

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-24 Thread Gunnar Wolf
Russ Allbery dijo [Tue, Jun 23, 2009 at 06:23:31PM -0700]: > > I will always challenge the "government-issued ID" due to the vastly > > differing standards across the globe, but "travel document" is > > actually a term that someone uttered earlier, which raises the bar a > > lot higher. > > For ex

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-24 Thread Sami Liedes
On Tue, Jun 23, 2009 at 07:55:57PM -0700, Don Armstrong wrote: > On Tue, 23 Jun 2009, Russ Allbery wrote: > > For example, I think US drivers' licenses are only verifiable by > > someone who's lived in that state or otherwise seen drivers' > > licenses from that state. > > Nah; there's a guide pub

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-24 Thread Simon Richter
On Tue, Jun 23, 2009 at 08:52:20PM +0200, martin f krafft wrote: > Additional metadata, e.g. number and expiration date would > be helpful. Actually that'd be illegal in Germany -- ID numbers of identification documents may not be stored in databases, with exactly two exceptions: - the issuing

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Don Armstrong
On Tue, 23 Jun 2009, Russ Allbery wrote: > For example, I think US drivers' licenses are only verifiable by > someone who's lived in that state or otherwise seen drivers' > licenses from that state. Nah; there's a guide published[1] which has all of them. [If you're a bar tender or a notary, you h

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Russ Allbery
martin f krafft writes: > I will always challenge the "government-issued ID" due to the vastly > differing standards across the globe, but "travel document" is > actually a term that someone uttered earlier, which raises the bar a > lot higher. For example, I think US drivers' licenses are only

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Daniel Kahn Gillmor
On 06/23/2009 02:52 PM, martin f krafft wrote: > Additional metadata, e.g. number and expiration date would > be helpful. This would certainly be useful from the smiting perspective, but might raise privacy concerns if people don't want their passport number (or whatever) bound to their OpenPGP ke

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread martin f krafft
also sprach Daniel Kahn Gillmor [2009.06.23.1949 +0200]: > --> govt-iss...@wot.debian.org might be a distinguished name > identifying the apparent issuer of any validated identification, > such as /C=US/ST=NY/ for a NY State (USA) driver's license and > /C=US/ for an American passport. If you che

[Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Daniel Kahn Gillmor
On 06/23/2009 12:34 PM, Manoj Srivastava wrote: > Frankly, recording the details of the verification performed is > a first step to improving the ability to assess the strength of the > link in the web of trust. A simple key sig is not enough, there could > be a formal process to add to