[Mini-DebConf] Key signing-party list
bubulle at debian.org
Ven 29 Oct 05:41:42 UTC 2010
Quoting Georges Khaznadar (georges.khaznadar at free.fr):
> Thank you Tanguy!
> hello all,
> as I did not want to print 13 pages out of the text file Tanguy
> attached, I converted it to a two-column document with tiny fonts with
> PdfLaTeX, here it is:
Thanks for this work, Georges. However, a very important point : if
people use lists instead of exchanging fingerprints, then they need a
way to check the validity of what's in the list
In short, people should have verified their fingerprint in Tanguy's
list, tanguy should compute its MD5 and SHA1 checksums. Then, at some
time during the miniconf, the participants should gather and these
checksums should be read loudly so that everybody verifies that
(s)he has the Right List. Finally, during the face to face signing
process, people have to confirm that they verified their key in the
list and that it matches.
In short, we need *one* reference list and that would be
Tanguy's. Anybody using your file without prior checking by
partyicipants that it contains their right fingerprint will be wrong.
Your work is important, for sure, but it would be better to share the
way you produced this PDF file from Tanguy's text file so that people
can still print a tree-savvy file....but still be sure that they have
the right list.
I hope this is clear..:-)
I would anyway recommend to *still* bring fingerprints (which reminds
me that I should print some!).
-------------- section suivante --------------
Une pièce jointe autre que texte a été nettoyée...
Nom: non disponible
Taille: 836 octets
Desc: Digital signature
More information about the Asso