Re: Why are in-person meetings required for the debian keyring?

2015-02-11 Thread Sam Hartman
Nikolaus == Nikolaus Rath nikol...@rath.org writes: Nikolaus However, it seems to me that meeting someone in person Nikolaus isn't actually verifying the relevant identity here. My Nikolaus trust in a Debian developer is not based on him holding a Nikolaus particular legal name,

Re: Why are in-person meetings required for the debian keyring?

2015-02-11 Thread Vincent Bernat
❦ 11 février 2015 11:17 -0800, Nikolaus Rath nikol...@rath.org : However, it seems to me that meeting someone in person isn't actually verifying the relevant identity here. My trust in a Debian developer is not based on him holding a particular legal name, it is in his history of

Why are in-person meetings required for the debian keyring?

2015-02-11 Thread Nikolaus Rath
Hello, I'm a little confused about the need to meet in-person to get a signature that's acceptable for the Debian keyring. I believe that Debian packages are signed on upload to ensure that they have been prepared by a Debian Developer, because Debian Developers are assumed to be trustworthy.

Re: Why are in-person meetings required for the debian keyring?

2015-02-11 Thread Philip Hands
Nikolaus Rath nikol...@rath.org writes: ... Following that argument, I think a key should be signed and included in the Debian keyring if it (the key) has a history of high quality contributions. Meeting the keyholder in person to look at his passport doesn't seem to add anything of particular

Re: Why are in-person meetings required for the debian keyring?

2015-02-11 Thread Paul Tagliamonte
On Wed, Feb 11, 2015 at 08:36:54PM +, Philip Hands wrote: Nikolaus Rath nikol...@rath.org writes: ... Following that argument, I think a key should be signed and included in the Debian keyring if it (the key) has a history of high quality contributions. Meeting the keyholder in person

How can I advertise to fill a Debian sys admin position?

2015-02-11 Thread Mark Laurence Donald Emerson
Hello, My organization needs to fill a sys admin position with someone proficient in Debian. Can you direct me to a means to advertise for that position among such individuals, such as an email list where it would be considered on topic, or a venue to publish a paid ad? Thank you. Mark

Re: Why are in-person meetings required for the debian keyring?

2015-02-11 Thread Russell Stuart
On Wed, 2015-02-11 at 11:17 -0800, Nikolaus Rath wrote: I'm a little confused about the need to meet in-person to get a signature that's acceptable for the Debian keyring. I believe that Debian packages are signed on upload to ensure that they have been prepared by a Debian Developer,

Re: Why are in-person meetings required for the debian keyring?

2015-02-11 Thread Christian Kastner
On 2015-02-11 21:45, Paul Tagliamonte wrote: I agree with Philip (as usual), but it's also the standard that we hold ourselves to when signing someones OpenPGP key -- I can't assert someone's identity matches without meeting them. I think this is spot on. This identity match ties a unique key

Re: How can I advertise to fill a Debian sys admin position?

2015-02-11 Thread Paul Wise
[Dropping inappropriate CCs] On Thu, Feb 12, 2015 at 9:26 AM, Mark Laurence Donald Emerson wrote: My organization needs to fill a sys admin position with someone proficient in Debian. Can you direct me to a means to advertise for that position among such individuals, such as an email list

Re: Why are in-person meetings required for the debian keyring?

2015-02-11 Thread Philip Hands
Russell Stuart russell-deb...@stuart.id.au writes: On Wed, 2015-02-11 at 11:17 -0800, Nikolaus Rath wrote: I'm a little confused about the need to meet in-person to get a signature that's acceptable for the Debian keyring. I believe that Debian packages are signed on upload to ensure that