RE: key signing

2012-10-15 Thread Dennis E. Hamilton
Ah, so the key servers federate! Cool. Thinking about the Man-in-the-Middle PKE attack, that is a little difficult with OpenPGP. That involves a man in the middle substituting their public key for mine and also arranging to intercept messages sent to me that are encrypted using the MitM publi

Re: key signing

2012-10-15 Thread Daniel Shahaf
Dennis E. Hamilton wrote on Mon, Oct 15, 2012 at 11:07:56 -0700: > . (I'm not sure > where this is fetched from, so I'm not sure how counter-signed versions Currently keys.gnupg.net https://svn.apache.org/repos/asf/infrastructure/site/trunk/pe

RE: key signing

2012-10-15 Thread Dennis E. Hamilton
@Benson There are two things that can be done, with (2) being what matters to you, it seems to me: 1. The committer can upload the fingerprint-associated public key to the PGP Global Directory at . That will initiate an e-mail verification for every e-mail

Re: key signing

2012-10-15 Thread Marvin Humphrey
On Mon, Oct 15, 2012 at 6:02 AM, Nick Burch wrote: > So, for a short-term fix for your potential Release Manger, I'd suggest you > get them in touch with a nearby local mentor. Why is raising the barrier to entry for new Release Managers better than having multiple experienced PMC members sign a

Re: key signing

2012-10-15 Thread Marvin Humphrey
On Mon, Oct 15, 2012 at 5:46 AM, Benson Margulies wrote: > Now I have a practical problem. I've received email from a committer > on a project. I have met him in person -- some years ago. I helped him > get started at Apache. His fellow PMC members are telling him that > it's *necessary* for him t

Re: [VOTE] Retire the Kitty project from incubation

2012-10-15 Thread Jukka Zitting
Hi, On Sun, Oct 14, 2012 at 5:15 PM, Kevan Miller wrote: > The Kitty community has voted to retire the project. I'm now moving the > retirement vote to the Incubator PMC. [x] +1 to retire the Kitty project BR, Jukka Zitting --

Re: [VOTE] Retire the Kitty project from incubation

2012-10-15 Thread Alan D. Cabrera
+1 Regards, Alan On Oct 14, 2012, at 8:15 AM, Kevan Miller wrote: > All, > The Kitty community has voted to retire the project. I'm now moving the > retirement vote to the Incubator PMC. > > Please cast your vote: > > [ ] +1 to retire the Kitty project > [ ] 0 for Don't care > [ ] -1 for No

Re: [VOTE] Retire the Kitty project from incubation

2012-10-15 Thread Daniel Kulp
+1 Dan On Oct 14, 2012, at 11:15 AM, Kevan Miller wrote: > All, > The Kitty community has voted to retire the project. I'm now moving the > retirement vote to the Incubator PMC. > > Please cast your vote: > > [ ] +1 to retire the Kitty project > [ ] 0 for Don't care > [ ] -1 for No, please

legal conditions regarding project website content

2012-10-15 Thread Florian Holeczek
Hi all, in the JSPWiki project, we have an issue similar to the situation described in [1]. The site www.jspwiki.org has always been the project's main page so far. We're aware of the fact that, after graduation, jspwiki.apache.org will have to be the project's main page (according to [2]). Suc

Re: key signing

2012-10-15 Thread Nick Burch
On Mon, 15 Oct 2012, Benson Margulies wrote: Choices: There is another option, which I mentioned in the other key signing thread on members@, which applies equally here too. Reposting my answer from there, with a few tweaks... In-person keysigning doesn't just have to be at ApacheCons, the

Re: [DISCUSS] Jr. Mentor role

2012-10-15 Thread Benson Margulies
> My point is only that I'd prefer to give Roman, and people like him, a > +1 on the IPMC (assuming people vouch for him) than have someone else > voting +1 on a release without doing appropriate due diligence. I certainly agree with this. > > Ross > > ---

Re: key signing

2012-10-15 Thread Benson Margulies
Now I have a practical problem. I've received email from a committer on a project. I have met him in person -- some years ago. I helped him get started at Apache. His fellow PMC members are telling him that it's *necessary* for him to come up with one or more signatures on his key to act at an RM.

Re: [DISCUSS] Jr. Mentor role

2012-10-15 Thread Ross Gardler
On 15 October 2012 12:29, Benson Margulies wrote: > This whole thread was launched, if I read Ross' remark correctly, by > my doing something stupid. I've apologized. It's not at all clear to > me that my mistake is example of a common kind of stupidity. Nope. My position is not prompted by any i

Re: [DISCUSS] Jr. Mentor role

2012-10-15 Thread Benson Margulies
This whole thread was launched, if I read Ross' remark correctly, by my doing something stupid. I've apologized. It's not at all clear to me that my mistake is example of a common kind of stupidity. I perceive, however, an ambiguity. The phrase 'proper IP verification,' more or less, has echoed do

Re: [VOTE] Retire the Kitty project from incubation

2012-10-15 Thread Bertrand Delacretaz
On Sun, Oct 14, 2012 at 5:15 PM, Kevan Miller wrote: > The Kitty community has voted to retire the project. I'm now moving the > retirement vote to the Incubator PMC. +1 -Bertrand - To unsubscribe, e-mail: general-unsubscr...@

Re: DeviceMap status (Was: [Incubator Wiki] Update of "October2012" by BertrandDelacretaz)

2012-10-15 Thread Bertrand Delacretaz
Hi Jukka, On Sat, Oct 13, 2012 at 4:27 PM, Jukka Zitting wrote: >> ...The donation included a data file with had been subject to a DMCA takedown >> request while hosted at Github. After some discussion we decided to exclude >> that file from the donation, as the ownership of part of that data is

Re: [DISCUSS] Jr. Mentor role

2012-10-15 Thread Ross Gardler
I dont disapprove of what you call "freelance votes". I disapprove of votes not backed by proper review efforts. Other than that I agree with all you say. Sent from mobile, forgive terseness and errors On Oct 15, 2012 3:43 AM, "Marvin Humphrey" wrote: > On Sat, Oct 13, 2012 at 11:33 AM, Ross Ga