Re: State of the debian keyring
On Sat, Feb 22, 2014 at 06:35:06PM -0600, Gunnar Wolf wrote:
> I'd like to ask the project as a whole for input on how we should push
> towards this migration. I guess that most of the socially-connected
> Debian Developers already have 4096R keys. How can we reach those who
> don't? How can we incentivate them to change?
I've looked at the debconf 2013 keysigning list. 13 people in it
had a 1024 bit key, but all of them also had a stronger one. It's
clear that the socially-connected DD already moved to a stronger
key, and that the problem would then be the others.
A few people have already suggested to set a timeline.
You also published this policy in 2010: