Re: Keysigning in times of COVID-19

Hello, El dj., 6 d’ag. 2020, 18:08, Enrico Zini va escriure: > > What do you think could be alternative key signing policies, that would > be acceptable to you, that would not require traveling and meeting face > to face? > - you know that person in the real world, or at least you have

Re: Keysigning in times of COVID-19

On 2020-08-06 17:54, Enrico Zini wrote: > What do you think could be alternative key signing policies, that would > be acceptable to you, that would not require traveling and meeting face > to face? As food for thought, there was a longish thread "Why are in-person meetings required for the

Re: Keysigning in times of COVID-19

Hi, Il 06/08/20 19:26, Johannes Schauer ha scritto: > What added value does the connection to a government ID give to Debian? And even if we assumed that it is for some reason useful to link each DD to a "government-verified" identity[1], what we actually verify (basically, the names) is very

Re: Keysigning in times of COVID-19

Quoting Enrico Zini (2020-08-06 17:54:21) [...] > Practically, I feel like most of the time people's policies match what > are the perceived expectations of the rest of the project. Meeting in > person has always been a good safe bet, if only for the reson that > it's been accepted without

Re: Keysigning in times of COVID-19

Hi Enrico, thanks for bringing this up. Quoting Enrico Zini (2020-08-06 17:54:21) > What do you think could be alternative key signing policies, that would be > acceptable to you, that would not require traveling and meeting face to face? I'm currently in the situation of sponsoring a very

Re: Keysigning in times of COVID-19

Hi Enrico, On Thu, Aug 6, 2020 at 9:15 AM Enrico Zini wrote: > > What do you think could be alternative key signing policies > ... that would not require ... meeting face to face? Perhaps a video meeting on Jitsi [1] is acceptable? People could present their IDs to the camera. Maybe the

Re: Keysigning in times of COVID-19

On Thu, Aug 06, 2020 at 05:54:21PM +0200, Enrico Zini wrote: > > What do you think could be alternative key signing policies, that would > be acceptable to you, that would not require traveling and meeting face > to face? > What about an added dimension that may (or may not) affect the concept

Keysigning in times of COVID-19

Hello, we have people approaching Debian with a lack of GPG signatures, and we generally cannot ask them to travel and meet other developers in person to get their key signed. Technically, we are not requiring that people meet a DD in person, only that people have their key signed by a DD.