[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [Debconf-discuss] Last call for keys for keysigning in Cape Town, South Africa



On Mon, 2016-06-13 20:29:51 +1000, Aníbal Monsalve Salazar wrote:
>
> There was detected a short key ID attack, with the same user IDs.
> Please be very careful when you sign keys.
>
> Curently, I have 62 keys listed at [1]:
>
>        1 ed25519
>        1 rsa3072
>       60 rsa4096
>
> [1] https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.txt

The deadline has now passed. If you haven't submitted your keys yet,
it's too late to get your keys in the list. It's not, however, too
late to participate altogether. Bring paper slips or business cards
with your gpg fingerprint.

The number of people in the list of keys is 119.

The number of keys is 130.

The distribution of keys is listed below.

      4 ed25519
      2 rsa2048
      1 rsa3072
    123 rsa4096

The list of keys and the keyring are available at:

https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.gpg.bz2
https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.gpg.bz2.sha256
https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.gpg.bz2.sha256.asc

https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.txt
https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.txt.sha256
https://people.debian.org/~anibal/ksp-dc16/ksp-dc16.txt.sha256.asc

During Gunnar's talk, we'll read aloud and project the hash of the
list of key fingerprints.

Gunnar's talk is titled "Learning from our keyring: What do our PGP
keys say about the project?" and is scheduled on Monday 4 July at
16:10.

https://debconf16.debconf.org/schedule/
https://debconf16.debconf.org/talks/22/
https://debconf16.debconf.org/users/gwolf/

Stefano Rivera (stefanor) noted that the organizers can announce it
at the opening, and had asked Gunnar to give an introduction talk to
the continuous keysigning, somewhere near the start of the
conference.

http://lists.debconf.org/lurker/message/20160615.194515.5097ead4.en.html

If you prefer not to print the list, you could convert it (after
checking the hash) into a html file with a form that you could
download to your laptop/tablet/phone. Joey Hess did just that in
Portland (DebConf14). Please have a look at his program [2] and
instructions [3].

Henrique de Moraes Holschuh (hmh) contribution to Joey's program
during DebConf15 in Heildelberg is at [4].

Please share in the list your improvements to Joey's program. ;)

[2] http://lists.debconf.org/lurker/message/20140821.071738.a6aa8691.en.html
[3] http://lists.debconf.org/lurker/message/20140824.033904.d828143b.en.html
[4] http://lists.debconf.org/lurker/message/20150816.152816.081aadff.en.html

Attachment: signature.asc
Description: Digital signature


Reply to: