Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: [Original edit by ShaneCurcuru] Add page about CACert assurances (if they happen)

It is our intent to have a PGP key signing at some point during the conference; however we are still working on a specific time during AC-US-05. We are shooting for Monday evening 22:00 during the end of the Welcoming Reception in the main hall - just listen for people shouting!

Remember: you can always sign keys individually throughout the conference. Feel free to ask around; if you meet other people from your project in person, they often will be willing to sign keys then. Some people print up simple business cards or small slips of paper with their name, email, and PGP key fingerprints to pass out.

Wiki Markup
*Update!* We're also working on having folks from CACert.org present at some point during ApacheCon so you can \[CaCertAssuring add points to your CACert certificates\].

What is a PGP Key Signing?

...

Preparation - BEFORE ApacheCon

  • E-mail your key to Sander Name-TBD at sander NameTBD <at> temme apache <dot> netorg as soon as possible. To get your key in emailable form use (PGP works similarly):

...

The key list, and a PGP (or GnuPG) keyring export will be available for your convenience at the following URL:

http://people.apache.org/~sctemme/ApconEU2005/Keysigning/~URL to be provided

The PGP Keysigning Event

  1. As an opening treat, we will have a short presentation by Ben Laurie and David Reid, authors of BaDCA, the Apache Certificate Authority. They will give us a brief overview of the CA, and how the PGP web of trust fits into this.
  2. Everybody gets a print-out of the key list. I will make those and have them available.
  3. The key entries on the printout are numbered. All participants line up in the order of their keys.
  4. The list will also be on the projection screen. You verify that your entry on the printout is correct: that the key ID, fingerprint and name + e-mail information match what you submitted. You also verify that your entry on the printout is the same as your entry on the screen.
  5. I will call out the name of each participant, in order. When your name is called, tell all participants loudly whether your information as verified in step 3 is correct.
  6. As participants positively verify their information, check whether their entry on the screen matches their entry on your printout. If so, you can place a check mark in the first of the two boxes at the right of your printout.

...