[all] Apache Commons PGP keys review

[Emmanuel Bourg <eb...@apache.org>]

Hi,

I'm about to transition to a stronger PGP key and I reviewed quickly the
keys used by the Commons committers (from
http://www.apache.org/dist/commons/KEYS). There are currently 67 keys,
11 keys have a length of 4096 bits or more, and only 5 keys are signed
by other people and linked to the web of trust. The winner of the key
signing game is Torsten Curdt with 85 connections.

That would be a good thing to have more keys signed in order to
strengthen the verification of our releases by downstream users and
packagers.

http://www.apache.org/dev/openpgp.html#apache-wot
http://www.apache.org/dev/release-signing.html#web-of-trust

The winter is over, it's time to go out and have a drink together to get
the keys signed folks! Anyone gets near Paris in the next months ? :)

Emmanuel Bourg

Re: [all] Apache Commons PGP keys review

[Gary Gregory <ga...@gmail.com>]

On Fri, Mar 22, 2013 at 9:58 AM, Benedikt Ritter <br...@apache.org> wrote:

> 2013/3/22 Torsten Curdt <tc...@vafer.org>
>
> > > The winner of the key signing game is Torsten Curdt with 85
> connections.
> >
> > I WON!!! ;-)
> >
> > > The winter is over,
> >
> > Well, so far that's just wishful thinking over here.
> >
> > > it's time to go out and have a drink together to get
> > > the keys signed folks! Anyone gets near Paris in the next months ? :)
> >
> > Anyone coming to Berlin? Let me know.
> >
>
> Looking at the committers map [1] I can see a few people living in Berlin
> and Paris. Who says your key has to be signed by commons committers. Just
> ping the people living in your area :-)
>
> At little bit off topic, but still related: I'm having trouble to set up a
> working infrastructure for singing on my local machine. Can anyone
> recommend a good software for Windows 7 for this, that has nice and shine
> buttons and doesn't require a working knowledge of Unix shell commands? ;-)
>

FWIW: I use gpg (GnuPG) 1.4.11, no shiny buttons.

Gary



>
> Benedikt
>
> [1] http://people.apache.org/map.html
>
>
> >
> > cheers,
> > Torsten
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> > For additional commands, e-mail: dev-help@commons.apache.org
> >
> >
>
>
> --
> http://people.apache.org/~britter/
> http://www.systemoutprintln.de/
> http://twitter.com/BenediktRitter
> http://github.com/britter
>



-- 
E-Mail: garydgregory@gmail.com | ggregory@apache.org
JUnit in Action, 2nd Ed: <http://goog_1249600977>http://bit.ly/ECvg0
Spring Batch in Action: <http://s.apache.org/HOq>http://bit.ly/bqpbCK
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory

Re: [all] Apache Commons PGP keys review

[Benedikt Ritter <br...@apache.org>]

2013/3/22 Torsten Curdt <tc...@vafer.org>

> > The winner of the key signing game is Torsten Curdt with 85 connections.
>
> I WON!!! ;-)
>
> > The winter is over,
>
> Well, so far that's just wishful thinking over here.
>
> > it's time to go out and have a drink together to get
> > the keys signed folks! Anyone gets near Paris in the next months ? :)
>
> Anyone coming to Berlin? Let me know.
>

Looking at the committers map [1] I can see a few people living in Berlin
and Paris. Who says your key has to be signed by commons committers. Just
ping the people living in your area :-)

At little bit off topic, but still related: I'm having trouble to set up a
working infrastructure for singing on my local machine. Can anyone
recommend a good software for Windows 7 for this, that has nice and shine
buttons and doesn't require a working knowledge of Unix shell commands? ;-)

Benedikt

[1] http://people.apache.org/map.html


>
> cheers,
> Torsten
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
>


-- 
http://people.apache.org/~britter/
http://www.systemoutprintln.de/
http://twitter.com/BenediktRitter
http://github.com/britter

Re: [all] Apache Commons PGP keys review

[Torsten Curdt <tc...@vafer.org>]

> The winner of the key signing game is Torsten Curdt with 85 connections.

I WON!!! ;-)

> The winter is over,

Well, so far that's just wishful thinking over here.

> it's time to go out and have a drink together to get
> the keys signed folks! Anyone gets near Paris in the next months ? :)

Anyone coming to Berlin? Let me know.

cheers,
Torsten

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org