[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: DM application of Philipp Kaluza



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Anibal,

thanks for you checks.

On 31.07.2011 16:42, Aníbal Monsalve Salazar wrote:
> Your key cannot encrypt, please fix this issue.

Before I do that (and I'm not fundamentally opposed to it), I would like
to know: Is it actually an issue ?

The reason why I think this is not actually needed:
 - The main use case for this key is signing uploads.
 - The standard reasoning for needing encryption subkeys (services want
to send me sensitive mail encrypted) does not seem to apply to DMs (e.g.
I already have an alioth account without it).
 - I have a primary key, even better connected in the Debian universe
(and already integrated in my mail reading workflow), that DDs can use
to contact me securely.
 - I could not find any information about needing encryption subkeys in
the DM GR or the Wiki page.
 - I would like to keep to keep my keyspace as fragmented as it already
is, and not fragment it further. That means only using keys for their
intended purposes, in this case, signing package uploads (and in some
cases, maybe authenticating Uploader-related mails.)
 - If I ever do apply to become a DD, it's quite easy to add an
encryption subkey at that time.

So, could you tell me the arguments _for_ adding an encryption subkey,
or point me to the relevant discussion ?

Thank you, much obliged.
  Philipp

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=r8EO
-----END PGP SIGNATURE-----


Reply to: