Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-27 Thread Gunnar Wolf
Ana Guerrero dijo [Thu, Jun 25, 2009 at 12:04:37PM +0200]: > On Tue, Jun 23, 2009 at 06:23:31PM -0700, Russ Allbery wrote: > > For example, I think US drivers' licenses are only verifiable by someone > > who's lived in that state or otherwise seen drivers' licenses from that > > state. I really di

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-26 Thread Gunnar Wolf
David Moreno dijo [Thu, Jun 25, 2009 at 09:27:28AM -0400]: > >> Driving licenses are expressly not accepted as official ID documents > >> in Mexico, even if they are government-issued. > > > > That just begs the question: official to whom, and why? > > Official for the government for procedures su

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-26 Thread Cyril Brulebois
Philipp Kern (26/06/2009): > On 2009-06-25, Bernd Eckenfels wrote: > > European ID cards are more like a passport, whereas a US ID is a > > driver license. (In addition to that national driver licenses of > > european countries are much less usefull for this purpose unless > > they are the new e

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-26 Thread Philipp Kern
On 2009-06-25, Bernd Eckenfels wrote: > In article <20090625100437.ga10...@ana.debian.net> you wrote: >> FWIW, you will see plenty of national ID from all the european countries >> in DebConf. I do expect most of germans, frenchs, italian, belgian, etc just >> travelling with their cards. They do

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread Bernd Eckenfels
In article <20090625100437.ga10...@ana.debian.net> you wrote: > FWIW, you will see plenty of national ID from all the european countries > in DebConf. I do expect most of germans, frenchs, italian, belgian, etc just > travelling with their cards. They do not need their passports to come. European

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread David Moreno
On Jun 24, 2009, at 5:43 PM, Peter Eisentraut wrote: On Wednesday 24 June 2009 16:58:52 Gunnar Wolf wrote: Driving licenses are expressly not accepted as official ID documents in Mexico, even if they are government-issued. That just begs the question: official to whom, and why? Official for

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread Enrico Zini
On Thu, Jun 25, 2009 at 12:04:37PM +0200, Ana Guerrero wrote: > FWIW, you will see plenty of national ID from all the european countries > in DebConf. I do expect most of germans, frenchs, italian, belgian, etc just > travelling with their cards. They do not need their passports to come. I do int

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-25 Thread Philipp Kern
On Wed, Jun 24, 2009 at 09:30:52AM +0800, Paul Wise wrote: > Would subkeys help in this scenario? (hint hint, some good docs about > real-world subkey usage are needed). Subkeys cannot (to my knowledge) be used for certification (i.e. key signing). At least not with stock gnupg. Kind regards, Phi

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-25 Thread Ana Guerrero
On Tue, Jun 23, 2009 at 06:23:31PM -0700, Russ Allbery wrote: > For example, I think US drivers' licenses are only verifiable by someone > who's lived in that state or otherwise seen drivers' licenses from that > state. I really dislike seeing people use them at key signings and > would rather see

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-24 Thread Peter Eisentraut
On Wednesday 24 June 2009 16:58:52 Gunnar Wolf wrote: > Driving licenses are expressly not accepted as official ID documents > in Mexico, even if they are government-issued. That just begs the question: official to whom, and why? Ultimately, the office clerk, the bar tender, or the key signer wi

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-24 Thread Gunnar Wolf
Russ Allbery dijo [Tue, Jun 23, 2009 at 06:23:31PM -0700]: > > I will always challenge the "government-issued ID" due to the vastly > > differing standards across the globe, but "travel document" is > > actually a term that someone uttered earlier, which raises the bar a > > lot higher. > > For ex

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-24 Thread Sami Liedes
On Tue, Jun 23, 2009 at 07:55:57PM -0700, Don Armstrong wrote: > On Tue, 23 Jun 2009, Russ Allbery wrote: > > For example, I think US drivers' licenses are only verifiable by > > someone who's lived in that state or otherwise seen drivers' > > licenses from that state. > > Nah; there's a guide pub

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-24 Thread Simon Richter
On Tue, Jun 23, 2009 at 08:52:20PM +0200, martin f krafft wrote: > Additional metadata, e.g. number and expiration date would > be helpful. Actually that'd be illegal in Germany -- ID numbers of identification documents may not be stored in databases, with exactly two exceptions: - the issuing

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Bernd Eckenfels
In article <20090624003554.gf9...@kunpuu.plessy.org> you wrote: > that would be very welcome. This whole discussion confuses me and I do not > understand if Debian as a project accepts signatures that are not based on a > passport or an ID card. For instance, I have used drivers licenses or social

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Bernd Eckenfels
In article <20090624025557.gb9...@rzlab.ucr.edu> you wrote: > I imagine that we can arrange to have a copy of that or a similar book > around for people to compare. And a UV lamp (at least one for money checking, but a special one for documents is even better, they have different wavelength. Eurp

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Don Armstrong
On Tue, 23 Jun 2009, Russ Allbery wrote: > For example, I think US drivers' licenses are only verifiable by > someone who's lived in that state or otherwise seen drivers' > licenses from that state. Nah; there's a guide published[1] which has all of them. [If you're a bar tender or a notary, you h

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Paul Wise
On Wed, Jun 24, 2009 at 3:14 AM, Daniel Kahn Gillmor wrote: > I think that misses a critical point; i want to use my OpenPGP key for a > variety of purposes both in and out of debian.  I consider it a baseline > tool for managing my digital identity.  While i'm happy to obey > debian-specific guid

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Russ Allbery
Charles Plessy writes: > that would be very welcome. This whole discussion confuses me and I do > not understand if Debian as a project accepts signatures that are not > based on a passport or an ID card. For instance, I have used drivers > licenses or social security cards as well, is that accep

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices

2009-06-23 Thread Russ Allbery
martin f krafft writes: > I will always challenge the "government-issued ID" due to the vastly > differing standards across the globe, but "travel document" is > actually a term that someone uttered earlier, which raises the bar a > lot higher. For example, I think US drivers' licenses are only

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Charles Plessy
Le Tue, Jun 23, 2009 at 08:52:20PM +0200, martin f krafft a écrit : > > On the other hand, just some clear guidelines that participants HAVE > TO abide by, would help, e.g. a commitment to a signing policy for > all keys that are to appear in a Debian keyring. Hi Martin, that would be very welco

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread Daniel Kahn Gillmor
On 06/23/2009 02:52 PM, martin f krafft wrote: > Additional metadata, e.g. number and expiration date would > be helpful. This would certainly be useful from the smiting perspective, but might raise privacy concerns if people don't want their passport number (or whatever) bound to their OpenPGP ke

Re: [Debconf-discuss] using OpenPGP notations to indicate keysigning practices [was: Re: GPG keysigning?]

2009-06-23 Thread martin f krafft
also sprach Daniel Kahn Gillmor [2009.06.23.1949 +0200]: > --> govt-iss...@wot.debian.org might be a distinguished name > identifying the apparent issuer of any validated identification, > such as /C=US/ST=NY/ for a NY State (USA) driver's license and > /C=US/ for an American passport. If you che