veyepar: Status of the Debian OpenPGP keyring

Author(s):	Gunnar Wolf
Location	Room 327/8
Date	aug Mon 25	Days Raw Files
Start	11:00	First Raw Start	10:47
Duration	00:45:00	Offset	0:12:20
End	11:45	Last Raw End	11:51
Chapters	00:00
Total cuts_time	48 min.

https://summit.debconf.org/debconf14/meeting/11/status-of-the-debian-openpgp-keyring/
raw-playlist raw-mp4-playlist encoded-files-playlist public mp4 svg png

assets release.pdf Status_of_the_Debian_OpenPGP_keyring.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

The Debian OpenPGP keyring is a vital part of the project's infrastructure: It provides a secure way to ensure each participant's identity in a way amenable to the geographically distributed nature of the project, and is used for basically all actions requiring authentication — Package uploads, General Resolution votes, mails to the =-announce= lists, etc.

For several years already, the keyring maintenance team has been pushing to migrate to more secure keys. In July 2010, the last PGPv3 keys were replaced. The current push is to get developers to migrate from older 1024D keys to (at least) 4096R keys.

In this talk, we want to:

- Introduce keyring-maint's work processes and policies, to get them better understood by the overall Debian community
- Present the migration process to stronger keys in numbers, highlighting the migration rhythm and possible issues
 - Delineate a consensuated migration plan, with deadlines to be followed, to allow for a complete migration to 4096R and higher keys
- Reviewing, as a group, what constitutes proper identification and what we require.
- Address all of your questions regarding keyring maintenance in Debian

Comment:

production notes