Le mercredi 06 janvier 2021 à 10:22:21-0000, Iain Lane (via nm.debian.org) a écrit : > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > I've worked with Gunnar for a number of years now. In that time he has > interacted with me using key F235A25E8A2A9718D7D8BDA36C79687A51F6608C. Gunnar > wishes now to apply to be a DD, and for that he needs an updaded 4096R key. > Travel is difficult currently, so after talking in private we decided to go > down the endorsement (rather than signing) route. > > Gunnar has published a transition statement on: > > https://people.ubuntu.com/~gunnarhj/gpg-transition-statement.txt.asc > > this is signed with both the new key and the old one which I am satisfied is > controlled by Gunnar. > > Gunnar has also updated his Launchpad account to reference this key. I believe > the Launchpad account is controlled only by Gunnar - and it also is the > container for his upload rights to the Ubuntu archive. > > https://launchpad.net/~gunnarhj > > and the latest upload was signed using this key too > > https://lists.ubuntu.com/archives/hirsute-changes/2020-December/006933.html > > 2021-01-06 > -----BEGIN PGP SIGNATURE----- > > iQIzBAEBCgAdFiEEPQ77lee1I38W6CJY41LVxRxQQdQFAl/1jzoACgkQ41LVxRxQ > QdTcow/+LJarh5LF4eSMY7eYPT8wxQdTiwESQxKG4DHGh764lQdRzzO52NK+caCE > yaqOXUNqD0W/YjvbpTeWpz/QrYbgOYW0rAT8RJQ2t2vH2H5HjfvjOWOBRDo9bhFo > VtnIAjVGN9YullCJqqv9QgPck+DOuX6QXVFECWGfeBPZ9ZAODt/JTqonKbS3K5ry > gODzd8XdiBf/2NCd91Aoqfvze4k/LMCYsnu0f+JUoY3kPJ9fdue6xHy1F9XK1anH > 1n5GEJ1VM6rkhRywTgrfZ9OE9G5FajTbbQns0Gy4sbI8P1Ys+i1D1i1qZ/NXKKBB > SxgMVz5kKTh+pFk6J5DIsAuB9upfYKYqczhs/4FvWMTxqOpcNsPiCWwg1mbv54r9 > J9qQ1CJN/P3LGcay8XrnvYOIo6fVlFqOZMcgzG2kw35pl2Vq4OT0hUzo6qZCW4dd > s7P2ZtJOQkkMtmuWvJbXMQ6Ztq3KBtnUB0Et8sMsIYF7XUHu13qCkToBk1xDwgpC > GNUf9Cat4MwL1mQC7of8gbC8Btn/FSKUKKSKCJpH/jcE9E/splaMLC0pG+o3+pWi > SayvTe91298bSqZqc6Q3WuyxVDICcfIueo1VLLZaOO+UqCjVhtgwvqrVQ/NeSQhC > OPrB416NygEpKCNbp2B3Ts9+MuOMAx+wYs44bA9b5Ss196zVggg= > =MrZG > -----END PGP SIGNATURE----- > > Iain Lane (via nm.debian.org) > > For details and to comment, visit https://nm.debian.org/fprs/person/gunnarhj/F235A25E8A2A9718D7D8BDA36C79687A51F6608C/endorsements/view/ > -- > https://nm.debian.org/fprs/person/gunnarhj/F235A25E8A2A9718D7D8BDA36C79687A51F6608C/endorsements/view/ > Le mercredi 06 janvier 2021 à 11:46:20-0000, Sebastien Bacher (via nm.debian.org) a écrit : > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > I've worked with Gunnar for 10 years now, mostly in Ubuntu but also in Debian sponsoring ibus uploads for him. > In that time he has interacted with me using key F235A25E8A2A9718D7D8BDA36C79687A51F6608C. > Gunnar wishes now to apply to be a DD, and for that he needs an updaded 4096R key. > Travel is difficult currently, so after talking in private we decided to go > down the endorsement (rather than signing) route. > > Gunnar has published a transition statement on: > > https://people.ubuntu.com/~gunnarhj/gpg-transition-statement.txt.asc > > this is signed with both the new key and the old one which I am satisfied is > controlled by Gunnar. > > Gunnar has also updated his Launchpad account to reference this key. I believe > the Launchpad account is controlled only by Gunnar - and it also is the > container for his upload rights to the Ubuntu archive. > > https://launchpad.net/~gunnarhj > > and the latest upload was signed using this key too > > https://lists.ubuntu.com/archives/hirsute-changes/2020-December/006933.html > -----BEGIN PGP SIGNATURE----- > > iQIzBAEBCAAdFiEERyS4b0fgKRXe6kniPr1EkD7bBJYFAl/1oqgACgkQPr1EkD7b > BJYsOBAAgAubetu6VxQElgmdYTINfWhg402WIHt8guYuZZ2oPIX0QhP218QMdtRd > +nX9LgYTFZC9jJFHDjNbHqKAV+ijbgyYpI/Gf+U5rzqg0ol0xcAL5pRJRsVwU3Gt > vTfjuWZAA0+SR+Z9yRNFLRQY7ODAzcrTczKei2Liayd+jtD0S3JP7pYB69wznKSX > lUyVFr2XgR7fucVaAhWtgG42kjKcIda8cwnDEb3saXaDswFYxGZfdMQO8dFynwkt > M/IPGN+Ml+rTE6NGUgMCzPfBq+VoMl2H+uZNsjzPnmElrUxDbfjCBC6FT/KFdDGD > CiVhif/ZM6KPJObsbDLRei2Nlh0QPSpsjhidH9lP28K/9hBGnT06lCfcrGjOnNih > I4yjtC3QRTiHfaMBQpkcYZYgosQzVBLlACjaTx5fBgJCRr0mDRn5HQO46KoqS2dD > 5WjNBPYHV213vZSG3rhWB0WEme2fYBNYmDh/7YE/dKSUvkHXGkP2kUF9WOPwP1jg > 5VGvPEnl/VsuuhG00rMrNG0Xk/HOP/nqdCaQ054tk+smVNgyvFfHln88QvbonR1V > 29TR18fY7zxYBRCwiLWmXscQaBEu0JO2iYQnvfuytNikKjW/cUtI1He5avwXkeBc > 7z5oq43dSOOkezO+gtvuZDJ1EgWe4MgsIxkuQtAe0MtQbfbiark= > =b+V3 > -----END PGP SIGNATURE----- > > Sebastien Bacher (via nm.debian.org) > > For details and to comment, visit https://nm.debian.org/fprs/person/gunnarhj/F235A25E8A2A9718D7D8BDA36C79687A51F6608C/endorsements/view/ > -- > https://nm.debian.org/fprs/person/gunnarhj/F235A25E8A2A9718D7D8BDA36C79687A51F6608C/endorsements/view/ Hi Iain, Sebastien, I'm not really at ease with your statement here. First you both cc-ed the same thing, which tends to make me think you did not write it by yourselves. Second, it's bogus: you pretend to have interacted with Gunnar for a long time with key F235A25E8A2A9718D7D8BDA36C79687A51F6608C which is the new one Gunnar wills to transition to. Gunnar being a Debian Contributor with quite some activity over the time, I'm eager to consider proper redacted endorsements by you as valid as long as you fix these (and if possible write these on your own). Could the both of you rewrite an endorsement stating (if possible with pointers) that you indeed interacted with Gunnar when he was using his old key, and mentioning the transition? Thanks. -- Pierre-Elliott Bécue GPG: 9AE0 4D98 6400 E3B6 7528 F493 0D44 2664 1949 74E2 It's far easier to fight for one's principles than to live up to them.
Attachment:
signature.asc
Description: PGP signature