From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 51C7B138AE9 for ; Mon, 27 Nov 2017 03:05:41 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 63F53E0C7A; Mon, 27 Nov 2017 03:05:39 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 38FDBE0C7A for ; Mon, 27 Nov 2017 03:05:38 +0000 (UTC) Received: from clocktown (anon-35-86.vpn.ipredator.se [46.246.35.86]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: zlg) by smtp.gentoo.org (Postfix) with ESMTPSA id A28B933C770 for ; Mon, 27 Nov 2017 03:05:36 +0000 (UTC) Date: Sun, 26 Nov 2017 19:05:26 -0800 From: Daniel Campbell To: gentoo-nfp@lists.gentoo.org Subject: Re: [gentoo-nfp] PGP fingerprints of Foundation members (item for Trustees meeting) Message-ID: <20171127030525.GD12059@clocktown> References: <22915.1353.636537.877268@a1i15.kph.uni-mainz.de> <20171126210616.GA12059@clocktown> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-nfp@lists.gentoo.org Reply-To: gentoo-nfp@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="7CZp05NP8/gJM8Cl" Content-Disposition: inline In-Reply-To: <20171126210616.GA12059@clocktown> User-Agent: Mutt/1.9.1 (2017-09-22) X-Archives-Salt: 96e6c0f5-0672-4240-b063-f0dddbf498a2 X-Archives-Hash: 740e4f0fedb4c3059cdba63c7c722f0a --7CZp05NP8/gJM8Cl Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Nov 26, 2017 at 01:06:17PM -0800, Daniel Campbell wrote: > On Thu, Aug 03, 2017 at 01:13:13PM +0200, Ulrich Mueller wrote: > > As discussed with prometheanfire in #gentoo-trustees, I am suggesting > > the following as an item for the (September?) Trustees meeting. > >=20 > > Apparently, the Foundation only has a list of PGP key IDs in > > https://wiki.gentoo.org/wiki/Foundation:Member_List. Even worse, most > > IDs listed there are only 32 bit IDs, providing no security at all. > >=20 > > I would like to ask the Foundation to keep a list with the (160 bit) > > PGP fingerprints of its members. (For developers, this information > > should be readily available in LDAP.) > >=20 > > Ulrich >=20 > Great idea. I'm willing to update this information: do I need anything be= yond > LDAP access + keyserver reference to do this? I also noticed it hasn't be= en > updated since July; do we have a file somewhere that has non-developer me= mbers > to cross-reference? >=20 > Changing from Key ID to fingerprint shouldn't be a problem; it'll just > be a wider table. >=20 > --=20 > Daniel Campbell - Gentoo Developer, Trustee, Treasurer > OpenPGP Key: 0x1EA055D6 @ hkp://keys.gnupg.net > fpr: AE03 9064 AE00 053C 270C 1DE4 6F7A 9091 1EA0 55D6 Nevermind, I found where we keep a list and have made a tool to update it. Once I get the go-ahead I'll update the wiki page and put this behind us. :) --=20 Daniel Campbell - Gentoo Developer, Trustee, Treasurer OpenPGP Key: 0x1EA055D6 @ hkp://keys.gnupg.net fpr: AE03 9064 AE00 053C 270C 1DE4 6F7A 9091 1EA0 55D6 --7CZp05NP8/gJM8Cl Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEgIn+0tMDW9PQWDLnASQOlFA54XAFAlobgPUACgkQASQOlFA5 4XCWRw/+MJyvTzN6lBk3jEZPrhxKglvxU29ru7Htjh0/mUw2+j57lpiY9JcIamNc Iz/U9rOzq1+lljaJsOrLhKg3d4GEcGAKjb3h4/Fz8XRgmTxNlNwPmaPSmxFFRxDo +nUbNgRfwcqugasi+mxe0Jl9REMxsruPsNb8dwNe/IvJvdOFQffgeg0C1loFpz2b DsdiEbjDj5F9XkRaa1R4R00MInyQljf9gFMSrBLU0k3zefLPLHh7AANEFkuTlKit EPtiC/l8BjUyfjROgWElHo0C52fNWpcAzVOAU9kehzV9+v6uNE+ipLxnjZ1xiL68 FB6TohkLtmW89ZnUV41ICh/Zu7jjr80vU7DsseyaCfsX8K2CFOad9Jq5B8Xt9NR5 8mFZ0mGI9A1AwgvB46/XStAeHeEvxr0PdZNiKfKGsR8MfNRfckjRDruJyXK4c1/c Fy3mlSAaAYi1QyPgiS6dvuSYIYZu4g0cn4Gm1yLfdz3i6F4J9d0zAvs4Li+0bGR4 CkWrjB42Te2hcXCyVF4TKjJgV2iTJTVTjo/v846kRTlX6f6oyVoGQC1k2Z+ocUea 7MIl/++eXuPVXweuQShcAqHykwUvXV9p5zR/q48U1w5csUPMdDO/iA0EUidb3zv5 dEXgeGRjJt81308ePBPapNErTm2d1ugxbMxupVuQx8vI+OLpoT4= =Ot6U -----END PGP SIGNATURE----- --7CZp05NP8/gJM8Cl--