Hi Gunnar, On Mon, Jul 18, 2022 at 11:26:39AM -0500, Gunnar Wolf wrote: > Hello Nilesh, > > Nilesh Patra (via nm.debian.org) dijo [Mon, Jul 18, 2022 at 01:31:35PM -0000]: > > For the past several months, I have worked with Robin Jarry on buildbot and aerc. > > (...) > > For this past work, Robin Jarry sent mails using the email address robin@jarry.cc > > which is the one they're using on nm.debian.org. > > > > I have made the following checks for their keys: > > > > 1. Checked a few mails for signatures in a lot of private correspondence we have had > > > > 2. Checked their signed commits to the repositories. I checked several of his upstream project > > repositories releases (aerc,dlrepo,sysrepo-python etc.), which are all signed with his gpg key. > > > > 3. Made sure that they are able to decrypt the messages sent to them with their GPG key > > > > I've made sure that they are able to decrypt encrypted messages sent to this key > > and that they're able to sign messages with the same key. > > > > Due to the long-term interactions we had, I'm convinced that Robin Jarry as they > > present themselves on nm.debian.org is the rightful owner of both email > > robin@jarry.cc and GPG key DC07 18E3 22E2 C760 5EBD C831 4695 7EC0 8FD0 FE90. > > Please be a bit more specific. How many months is "past several > months"? Since November last year (as I wrote in my advocacy too) so that would be around 8-9 months. > What does "a few mails" mean? Their mails on mailing lists aren't signed unfortunately, but I check the signatures in personal correspondence hence the phrase. > What is a "long-term interaction"? I suppose you/newmaint should answer this -- I did not type the last part, it is directly picked up from the nm template that I get when I click on "Endorse" (As per my understanding, I took $long-term as the number of months that I have worked with him) Do you want me to re-declare an endorsement? (I mean, I could but it doesn't add up much here) -- Regards, Nilesh
Attachment:
signature.asc
Description: PGP signature