Re: State of the debian keyring

[Kurt Roeckx <kurt@roeckx.be>]

On Sat, Feb 22, 2014 at 06:35:06PM -0600, Gunnar Wolf wrote:
> 
> I'd like to ask the project as a whole for input on how we should push
> towards this migration. I guess that most of the socially-connected
> Debian Developers already have 4096R keys. How can we reach those who
> don't? How can we incentivate them to change?

I've looked at the debconf 2013 keysigning list.  13 people in it
had a 1024 bit key, but all of them also had a stronger one.  It's
clear that the socially-connected DD already moved to a stronger
key, and that the problem would then be the others.

A few people have already suggested to set a timeline.

You also published this policy in 2010:
https://lists.debian.org/debian-devel-announce/2010/09/msg00003.html


Kurt