Difference between pages "Social Events/Flock of Kiwis" and "Key signing"

From LCA2014 Delegate Wiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
Interested:
+
= Key signing party =
* Organiser [[Steven Ellis]]
+
We should have a key signing party, up for suggestions on where and when and what format
* Nick Clifford
+
 
* Ewen McNeill
+
 
* Lev Lafayette (well, I born in NZ and I own a place in Dunedin, does that count?)
+
 
* Zane Gilmore
+
== Before the event ==
* Andrew and Lisa Sands (depending on what volunteer duties the boss has.)
+
 
* [[Simon Lyall]]
+
You need a gpg key to start, create one now!
* [[Liz Quilty]]
+
You might as well make it with as big a key size as possible.
* [[Lin Nah]]
+
<pre>gpg --gen-key
 +
gpg --list-secret-keys
 +
gpg --fingerprint FA9EC035</pre>
 +
 
 +
== Submitting your key ==
 +
 
 +
Currently nothing has been decided, please add suggestions below.
 +
* create a wiki page containing your fingerprints
 +
** [[https://lca2014.linux.org.au/wiki/User:Daniel_sobey Daniel Sobey]]  
 +
* Some other tool, edit this page and we may use it
 +
 
 +
== At the event ==
 +
We will need someone to collate the keys and print them out.
 +
Please let us know how many we should print and where to print them.
 +
 
 +
What we did last year was go to a lecture theatre with a projector.
 +
Each person stands up, shows their photo id and read their fingerprint aloud.
 +
printouts of everyone's fingerprints were provided so you can tick off as you go
 +
This worked ok but took a long time to get through everyone.
 +
 
 +
== Ad hoc Signing ==
 +
 
 +
Put your fingerprint on a piece of paper and hand it out to people.
 +
No need to do it formally just swap as you meet.
 +
 
 +
Things to watch out for:
 +
* does it match thair name
 +
* Does the person have a key with that fingerprint, do the numbers match.
 +
* know that anyone can generate a key and claim an email address
 +
* if someone can be bothered they can keep trying to generate a key with the first 8 digits the same as another key but getting the whole fingerprint is nearly impossible

Revision as of 21:42, 31 December 2013

Contents

Key signing party

We should have a key signing party, up for suggestions on where and when and what format


Before the event

You need a gpg key to start, create one now! You might as well make it with as big a key size as possible.

gpg --gen-key
gpg --list-secret-keys
gpg --fingerprint FA9EC035

Submitting your key

Currently nothing has been decided, please add suggestions below.

  • create a wiki page containing your fingerprints
  • Some other tool, edit this page and we may use it

At the event

We will need someone to collate the keys and print them out. Please let us know how many we should print and where to print them.

What we did last year was go to a lecture theatre with a projector. Each person stands up, shows their photo id and read their fingerprint aloud. printouts of everyone's fingerprints were provided so you can tick off as you go This worked ok but took a long time to get through everyone.

Ad hoc Signing

Put your fingerprint on a piece of paper and hand it out to people. No need to do it formally just swap as you meet.

Things to watch out for:

  • does it match thair name
  • Does the person have a key with that fingerprint, do the numbers match.
  • know that anyone can generate a key and claim an email address
  • if someone can be bothered they can keep trying to generate a key with the first 8 digits the same as another key but getting the whole fingerprint is nearly impossible