Hello Matthias, hello NoisyCoil, Thanks NoisyCoil for you contributions to debian so far \O/, and thank you Matthias for willing to endorse NoisyCoil's key. However, I am afraid that, IMO, interacting with someone for two months is not enough for endorsing their key. Calling an interaction long-term would mean something like 6 months, at least. The key endorsements are meant to show a history of the link between a key and their owner through the contributions. So we expect some more than a couple of months, sorry. Also, we should probably better document this, but giving links to some signed contributions also helps to strength a key endorsement. And since we are here, for applying to DM it is required to have one key signature or two strong key endorsements. Do you have any plans on that? Best regards, El 18/09/24 a las 18:52, Matthias Geiger (via nm.debian.org) escribió: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > For nm.debian.org, at 2024-09-18: > For the past two months, I have worked with NoisyCoil on tiny-dfr, dysk and the rust packages > needed for those tools. > > For this past work, NoisyCoil sent mails using the email address noisycoil@tutanota.com > which is the one they're using on nm.debian.org, and they signed their work and > email using a GPG key with fingerprint 50CF C9D5 E5BD E1CB CA57 FD7B 6DF0 08E7 0F28 CBF7. > > I've made sure that they are able to decrypt encrypted messages sent to this key > and that they're able to sign messages with the same key. > > Due to the long-term interactions we had, I'm convinced that NoisyCoil as they > present themselves on nm.debian.org is the rightful owner of both email > noisycoil@tutanota.com and GPG key 50CF C9D5 E5BD E1CB CA57 FD7B 6DF0 08E7 0F28 CBF7 > -----BEGIN PGP SIGNATURE----- > > iHUEARYIAB0WIQQUWTv/Sl6/b+DpcW7svtu2B7myvgUCZushYgAKCRDsvtu2B7my > voOwAQD+AR6F19QiI4VLURFHWpHDFBs724ALAJyXEiLNjlE6jAD+IvTVIDxL5ofI > EDjbFfE+eH9m/tHyLOkCmmriAJT8TQY= > =DNJZ > -----END PGP SIGNATURE----- > > Matthias Geiger (via nm.debian.org) > > For details and to comment, visit https://nm.debian.org/fprs/person/noisycoil/50CFC9D5E5BDE1CBCA57FD7B6DF008E70F28CBF7/endorsements/view/ > -- > https://nm.debian.org/fprs/person/noisycoil/50CFC9D5E5BDE1CBCA57FD7B6DF008E70F28CBF7/endorsements/view/ >
Attachment:
signature.asc
Description: PGP signature