* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-05 14:44 ` Laurent Pinchart
@ 2022-09-05 14:56 ` Ricardo Ribalda
2022-09-05 15:08 ` Jernej Škrabec
2022-09-06 6:58 ` Hans Verkuil
` (6 subsequent siblings)
7 siblings, 1 reply; 29+ messages in thread
From: Ricardo Ribalda @ 2022-09-05 14:56 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Sakari Ailus, Hans Verkuil, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
Good initiative! Thanks for organizing
On Mon, 5 Sept 2022 at 16:44, Laurent Pinchart
<laurent.pinchart@ideasonboard.com> wrote:
>
> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > 16:45-18:00 Anything else?
> >
> > I think it'd be great to have a GPG key signing party at the end of the
> > meeting.
>
> It's a good idea. Could everybody please send their GPG key fingerprint
> in an e-mail reply to prepare for that ? It can easily be retrieved with
> 'gpg -K' (make sure to pick the right key if you have multiple of them).
> I'll start:
>
> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> 94231B980100EC619AC10E10F045C2B96991256E
> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
sec# rsa4096 2018-10-19 [SC] [expires: 2026-05-20]
9EC3BB66E2FC129A6F90B39556A0D81F9F782DA9
uid [ultimate] Ricardo Ribalda Delgado <ricardo@ribalda.com>
uid [ultimate] Ricardo Ribalda Delgado <ricardo.ribalda@gmail.com>
uid [ultimate] Ricardo Ribalda Delgado <ribalda@kernel.org>
>
> --
> Regards,
>
> Laurent Pinchart
--
Ricardo Ribalda
^ permalink raw reply [flat|nested] 29+ messages in thread* Re: Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-05 14:56 ` Ricardo Ribalda
@ 2022-09-05 15:08 ` Jernej Škrabec
0 siblings, 0 replies; 29+ messages in thread
From: Jernej Škrabec @ 2022-09-05 15:08 UTC (permalink / raw)
To: Laurent Pinchart, Ricardo Ribalda
Cc: Sakari Ailus, Hans Verkuil, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Maxime Ripard, Daniel Scally,
Dave Stevenson, Philipp Zabel
Dne ponedeljek, 05. september 2022 ob 16:56:23 CEST je Ricardo Ribalda
napisal(a):
> Good initiative! Thanks for organizing
>
> On Mon, 5 Sept 2022 at 16:44, Laurent Pinchart
>
> <laurent.pinchart@ideasonboard.com> wrote:
> > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > > 16:45-18:00 Anything else?
> > >
> > > I think it'd be great to have a GPG key signing party at the end of the
> > > meeting.
> >
> > It's a good idea. Could everybody please send their GPG key fingerprint
> > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > I'll start:
> >
> > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> >
> > 94231B980100EC619AC10E10F045C2B96991256E
> >
> > uid [ultimate] Laurent Pinchart
> > <laurent.pinchart@ideasonboard.com>
> sec# rsa4096 2018-10-19 [SC] [expires: 2026-05-20]
> 9EC3BB66E2FC129A6F90B39556A0D81F9F782DA9
> uid [ultimate] Ricardo Ribalda Delgado <ricardo@ribalda.com>
> uid [ultimate] Ricardo Ribalda Delgado <ricardo.ribalda@gmail.com>
> uid [ultimate] Ricardo Ribalda Delgado <ribalda@kernel.org>
sec# rsa4096 2022-02-11 [C] [expires: 2072-01-30]
A8BBA340E0940BC408AA839A76691E98F228D396
uid [ultimate] Jernej Skrabec <jernej.skrabec@gmail.com>
uid [ultimate] Jernej Skrabec <jernej@kernel.org>
> > --
> > Regards,
> >
> > Laurent Pinchart
>
> --
> Ricardo Ribalda
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-05 14:44 ` Laurent Pinchart
2022-09-05 14:56 ` Ricardo Ribalda
@ 2022-09-06 6:58 ` Hans Verkuil
2022-09-07 6:51 ` Hans Verkuil
` (5 subsequent siblings)
7 siblings, 0 replies; 29+ messages in thread
From: Hans Verkuil @ 2022-09-06 6:58 UTC (permalink / raw)
To: Laurent Pinchart, Sakari Ailus
Cc: linux-media, Kieran Bingham, Nicolas Dufresne, Benjamin Gaignard,
Hidenori Kobayashi, Paul Kocialkowski, Jacopo Mondi,
Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On 05/09/2022 16:44, Laurent Pinchart wrote:
> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
>> On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
>>> 16:45-18:00 Anything else?
>>
>> I think it'd be great to have a GPG key signing party at the end of the
>> meeting.
>
> It's a good idea. Could everybody please send their GPG key fingerprint
> in an e-mail reply to prepare for that ? It can easily be retrieved with
> 'gpg -K' (make sure to pick the right key if you have multiple of them).
> I'll start:
>
> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> 94231B980100EC619AC10E10F045C2B96991256E
> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
>
> If you're generating a key for the occasion, create a primary key with
> the Certify (C) capability only, and create separate sub-keys for
> Signature (S) and Encryption (E). There's little reason these days to
> use less than 4096 bits for the primary key if you opt for RSA. The
> subkeys should have an expiration date.
>
> The primary key can then be moved to safe storage, you will only need
> the subkeys for daily usage. The primary key will be used only to
> create new subkeys and to sign other people's keys.
>
sec# rsa4096 2014-10-14 [SC] [expires: 2024-10-11]
052CDE7BC215053B689F1BCABD2D614866143B4C
uid [ultimate] Hans Verkuil <hverkuil-cisco@xs4all.nl>
uid [ultimate] Hans Verkuil <hverkuil@xs4all.nl>
^ permalink raw reply [flat|nested] 29+ messages in thread* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-05 14:44 ` Laurent Pinchart
2022-09-05 14:56 ` Ricardo Ribalda
2022-09-06 6:58 ` Hans Verkuil
@ 2022-09-07 6:51 ` Hans Verkuil
2022-09-07 7:44 ` Sakari Ailus
2022-09-07 9:51 ` Laurent Pinchart
2022-09-07 7:36 ` Sakari Ailus
` (4 subsequent siblings)
7 siblings, 2 replies; 29+ messages in thread
From: Hans Verkuil @ 2022-09-07 6:51 UTC (permalink / raw)
To: Laurent Pinchart, Sakari Ailus
Cc: linux-media, Kieran Bingham, Nicolas Dufresne, Benjamin Gaignard,
Hidenori Kobayashi, Paul Kocialkowski, Jacopo Mondi,
Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
Hi Laurent,
On 05/09/2022 16:44, Laurent Pinchart wrote:
> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
>> On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
>>> 16:45-18:00 Anything else?
>>
>> I think it'd be great to have a GPG key signing party at the end of the
>> meeting.
>
> It's a good idea. Could everybody please send their GPG key fingerprint
> in an e-mail reply to prepare for that ? It can easily be retrieved with
> 'gpg -K' (make sure to pick the right key if you have multiple of them).
> I'll start:
>
> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> 94231B980100EC619AC10E10F045C2B96991256E
> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
>
> If you're generating a key for the occasion, create a primary key with
> the Certify (C) capability only, and create separate sub-keys for
> Signature (S) and Encryption (E). There's little reason these days to
> use less than 4096 bits for the primary key if you opt for RSA. The
> subkeys should have an expiration date.
>
> The primary key can then be moved to safe storage, you will only need
> the subkeys for daily usage. The primary key will be used only to
> create new subkeys and to sign other people's keys.
>
Can you also give instructions on what to do at the key signing party?
I do this so rarely that I always forget what magic gpg commands I need
to make to sign keys.
If everyone has this information at hand, then we can quickly proceed with
this on Monday.
Regards,
Hans
^ permalink raw reply [flat|nested] 29+ messages in thread* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 6:51 ` Hans Verkuil
@ 2022-09-07 7:44 ` Sakari Ailus
2022-09-07 9:51 ` Laurent Pinchart
1 sibling, 0 replies; 29+ messages in thread
From: Sakari Ailus @ 2022-09-07 7:44 UTC (permalink / raw)
To: Hans Verkuil
Cc: Laurent Pinchart, linux-media, Kieran Bingham, Nicolas Dufresne,
Benjamin Gaignard, Hidenori Kobayashi, Paul Kocialkowski,
Jacopo Mondi, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
Hi Hans,
On Wed, Sep 07, 2022 at 08:51:48AM +0200, Hans Verkuil wrote:
> Hi Laurent,
>
> On 05/09/2022 16:44, Laurent Pinchart wrote:
> > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> >> On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> >>> 16:45-18:00 Anything else?
> >>
> >> I think it'd be great to have a GPG key signing party at the end of the
> >> meeting.
> >
> > It's a good idea. Could everybody please send their GPG key fingerprint
> > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > I'll start:
> >
> > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> > 94231B980100EC619AC10E10F045C2B96991256E
> > uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
> >
> > If you're generating a key for the occasion, create a primary key with
> > the Certify (C) capability only, and create separate sub-keys for
> > Signature (S) and Encryption (E). There's little reason these days to
> > use less than 4096 bits for the primary key if you opt for RSA. The
> > subkeys should have an expiration date.
> >
> > The primary key can then be moved to safe storage, you will only need
> > the subkeys for daily usage. The primary key will be used only to
> > create new subkeys and to sign other people's keys.
> >
>
> Can you also give instructions on what to do at the key signing party?
>
> I do this so rarely that I always forget what magic gpg commands I need
> to make to sign keys.
>
> If everyone has this information at hand, then we can quickly proceed with
> this on Monday.
There's one here (directly linking to the signing section albeit the rest
is important, too):
<URL:https://www.cryptnet.net/fdp/crypto/keysigning_party/en/keysigning_party.html#id2557964>
I also wrote a small script that assumes there will be no errors of any
sort at any point of time, in conjunction with the e-mail on the key list.
--
Sakari Ailus
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 6:51 ` Hans Verkuil
2022-09-07 7:44 ` Sakari Ailus
@ 2022-09-07 9:51 ` Laurent Pinchart
2022-09-07 9:58 ` Hans Verkuil
1 sibling, 1 reply; 29+ messages in thread
From: Laurent Pinchart @ 2022-09-07 9:51 UTC (permalink / raw)
To: Hans Verkuil
Cc: Sakari Ailus, linux-media, Kieran Bingham, Nicolas Dufresne,
Benjamin Gaignard, Hidenori Kobayashi, Paul Kocialkowski,
Jacopo Mondi, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
Hi Hans,
On Wed, Sep 07, 2022 at 08:51:48AM +0200, Hans Verkuil wrote:
> On 05/09/2022 16:44, Laurent Pinchart wrote:
> > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> >> On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> >>> 16:45-18:00 Anything else?
> >>
> >> I think it'd be great to have a GPG key signing party at the end of the
> >> meeting.
> >
> > It's a good idea. Could everybody please send their GPG key fingerprint
> > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > I'll start:
> >
> > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> > 94231B980100EC619AC10E10F045C2B96991256E
> > uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
> >
> > If you're generating a key for the occasion, create a primary key with
> > the Certify (C) capability only, and create separate sub-keys for
> > Signature (S) and Encryption (E). There's little reason these days to
> > use less than 4096 bits for the primary key if you opt for RSA. The
> > subkeys should have an expiration date.
> >
> > The primary key can then be moved to safe storage, you will only need
> > the subkeys for daily usage. The primary key will be used only to
> > create new subkeys and to sign other people's keys.
> >
>
> Can you also give instructions on what to do at the key signing party?
>
> I do this so rarely that I always forget what magic gpg commands I need
> to make to sign keys.
>
> If everyone has this information at hand, then we can quickly proceed with
> this on Monday.
Good point.
First of all, everybody should make sure that their key is published on
key servers.
I will gather al the keys and print a list that I will hand out to
everybody on Monday. This will be the authoritative source of
information, as anything stored in digital form could theoritically be
tampered with.
We will go around the table, and everybody will check that their key ID
matches the printed documented (to make sure I haven't tampered with the
printed version they have received), and read it out loud for everybody
to compare with their own printed version (to make sure I've distributed
the same version to everybody). If any mismatch is noticed, people are
expected to shout out loud.
Then we will verify identities. If we have a laptop with a webcam that
can be hooked up to a projector, we can simply take turns and show a
government-issues ID that clearly displays our name, for people in the
room to compare that with the keys. Once the fingerprints and the
identities are checked, the corresponding keys should be marked as
verified on the paper version.
The next step is to sign keys. This is something that will happen after
the media summit, and if you have your master key on offline storage,
will happen after you get back home. You will need to download keys from
key servers, verify that the fingerprints match the paper version and
sign the keys.
The final step is to publish signatures. I'll try to check what the
latest best practices are. One option is to simply publish the
signatures to key servers, but we can also mail them to the key owner,
in an encrypted e-mail to make sure the recipient is the intended
person.
--
Regards,
Laurent Pinchart
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 9:51 ` Laurent Pinchart
@ 2022-09-07 9:58 ` Hans Verkuil
2022-09-07 10:06 ` Laurent Pinchart
0 siblings, 1 reply; 29+ messages in thread
From: Hans Verkuil @ 2022-09-07 9:58 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Sakari Ailus, linux-media, Kieran Bingham, Nicolas Dufresne,
Benjamin Gaignard, Hidenori Kobayashi, Paul Kocialkowski,
Jacopo Mondi, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On 07/09/2022 11:51, Laurent Pinchart wrote:
> Hi Hans,
>
> On Wed, Sep 07, 2022 at 08:51:48AM +0200, Hans Verkuil wrote:
>> On 05/09/2022 16:44, Laurent Pinchart wrote:
>>> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
>>>> On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
>>>>> 16:45-18:00 Anything else?
>>>>
>>>> I think it'd be great to have a GPG key signing party at the end of the
>>>> meeting.
>>>
>>> It's a good idea. Could everybody please send their GPG key fingerprint
>>> in an e-mail reply to prepare for that ? It can easily be retrieved with
>>> 'gpg -K' (make sure to pick the right key if you have multiple of them).
>>> I'll start:
>>>
>>> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
>>> 94231B980100EC619AC10E10F045C2B96991256E
>>> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
>>>
>>> If you're generating a key for the occasion, create a primary key with
>>> the Certify (C) capability only, and create separate sub-keys for
>>> Signature (S) and Encryption (E). There's little reason these days to
>>> use less than 4096 bits for the primary key if you opt for RSA. The
>>> subkeys should have an expiration date.
>>>
>>> The primary key can then be moved to safe storage, you will only need
>>> the subkeys for daily usage. The primary key will be used only to
>>> create new subkeys and to sign other people's keys.
>>>
>>
>> Can you also give instructions on what to do at the key signing party?
>>
>> I do this so rarely that I always forget what magic gpg commands I need
>> to make to sign keys.
>>
>> If everyone has this information at hand, then we can quickly proceed with
>> this on Monday.
>
> Good point.
>
> First of all, everybody should make sure that their key is published on
> key servers.
Which key servers? That's never been clear to me: which key server(s) are
you supposed to use?
Regards,
Hans
>
> I will gather al the keys and print a list that I will hand out to
> everybody on Monday. This will be the authoritative source of
> information, as anything stored in digital form could theoritically be
> tampered with.
>
> We will go around the table, and everybody will check that their key ID
> matches the printed documented (to make sure I haven't tampered with the
> printed version they have received), and read it out loud for everybody
> to compare with their own printed version (to make sure I've distributed
> the same version to everybody). If any mismatch is noticed, people are
> expected to shout out loud.
>
> Then we will verify identities. If we have a laptop with a webcam that
> can be hooked up to a projector, we can simply take turns and show a
> government-issues ID that clearly displays our name, for people in the
> room to compare that with the keys. Once the fingerprints and the
> identities are checked, the corresponding keys should be marked as
> verified on the paper version.
>
> The next step is to sign keys. This is something that will happen after
> the media summit, and if you have your master key on offline storage,
> will happen after you get back home. You will need to download keys from
> key servers, verify that the fingerprints match the paper version and
> sign the keys.
>
> The final step is to publish signatures. I'll try to check what the
> latest best practices are. One option is to simply publish the
> signatures to key servers, but we can also mail them to the key owner,
> in an encrypted e-mail to make sure the recipient is the intended
> person.
>
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 9:58 ` Hans Verkuil
@ 2022-09-07 10:06 ` Laurent Pinchart
2022-09-07 10:30 ` Hans Verkuil
0 siblings, 1 reply; 29+ messages in thread
From: Laurent Pinchart @ 2022-09-07 10:06 UTC (permalink / raw)
To: Hans Verkuil
Cc: Sakari Ailus, linux-media, Kieran Bingham, Nicolas Dufresne,
Benjamin Gaignard, Hidenori Kobayashi, Paul Kocialkowski,
Jacopo Mondi, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On Wed, Sep 07, 2022 at 11:58:29AM +0200, Hans Verkuil wrote:
> On 07/09/2022 11:51, Laurent Pinchart wrote:
> > On Wed, Sep 07, 2022 at 08:51:48AM +0200, Hans Verkuil wrote:
> >> On 05/09/2022 16:44, Laurent Pinchart wrote:
> >>> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> >>>> On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> >>>>> 16:45-18:00 Anything else?
> >>>>
> >>>> I think it'd be great to have a GPG key signing party at the end of the
> >>>> meeting.
> >>>
> >>> It's a good idea. Could everybody please send their GPG key fingerprint
> >>> in an e-mail reply to prepare for that ? It can easily be retrieved with
> >>> 'gpg -K' (make sure to pick the right key if you have multiple of them).
> >>> I'll start:
> >>>
> >>> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> >>> 94231B980100EC619AC10E10F045C2B96991256E
> >>> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
> >>>
> >>> If you're generating a key for the occasion, create a primary key with
> >>> the Certify (C) capability only, and create separate sub-keys for
> >>> Signature (S) and Encryption (E). There's little reason these days to
> >>> use less than 4096 bits for the primary key if you opt for RSA. The
> >>> subkeys should have an expiration date.
> >>>
> >>> The primary key can then be moved to safe storage, you will only need
> >>> the subkeys for daily usage. The primary key will be used only to
> >>> create new subkeys and to sign other people's keys.
> >>>
> >>
> >> Can you also give instructions on what to do at the key signing party?
> >>
> >> I do this so rarely that I always forget what magic gpg commands I need
> >> to make to sign keys.
> >>
> >> If everyone has this information at hand, then we can quickly proceed with
> >> this on Monday.
> >
> > Good point.
> >
> > First of all, everybody should make sure that their key is published on
> > key servers.
>
> Which key servers? That's never been clear to me: which key server(s) are
> you supposed to use?
They are supposed to mirror each other, so any of the main ones should
do. hkp://keys.gnupg.net, hkp://pgp.mit.edu, hkps://keys.openpgp.org,
hkp://keyserver.ubuntu.com, ...
> > I will gather al the keys and print a list that I will hand out to
> > everybody on Monday. This will be the authoritative source of
> > information, as anything stored in digital form could theoritically be
> > tampered with.
> >
> > We will go around the table, and everybody will check that their key ID
> > matches the printed documented (to make sure I haven't tampered with the
> > printed version they have received), and read it out loud for everybody
> > to compare with their own printed version (to make sure I've distributed
> > the same version to everybody). If any mismatch is noticed, people are
> > expected to shout out loud.
> >
> > Then we will verify identities. If we have a laptop with a webcam that
> > can be hooked up to a projector, we can simply take turns and show a
> > government-issues ID that clearly displays our name, for people in the
> > room to compare that with the keys. Once the fingerprints and the
> > identities are checked, the corresponding keys should be marked as
> > verified on the paper version.
> >
> > The next step is to sign keys. This is something that will happen after
> > the media summit, and if you have your master key on offline storage,
> > will happen after you get back home. You will need to download keys from
> > key servers, verify that the fingerprints match the paper version and
> > sign the keys.
> >
> > The final step is to publish signatures. I'll try to check what the
> > latest best practices are. One option is to simply publish the
> > signatures to key servers, but we can also mail them to the key owner,
> > in an encrypted e-mail to make sure the recipient is the intended
> > person.
--
Regards,
Laurent Pinchart
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 10:06 ` Laurent Pinchart
@ 2022-09-07 10:30 ` Hans Verkuil
2022-09-07 11:53 ` Maxime Ripard
0 siblings, 1 reply; 29+ messages in thread
From: Hans Verkuil @ 2022-09-07 10:30 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Sakari Ailus, linux-media, Kieran Bingham, Nicolas Dufresne,
Benjamin Gaignard, Hidenori Kobayashi, Paul Kocialkowski,
Jacopo Mondi, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On 07/09/2022 12:06, Laurent Pinchart wrote:
> On Wed, Sep 07, 2022 at 11:58:29AM +0200, Hans Verkuil wrote:
>> On 07/09/2022 11:51, Laurent Pinchart wrote:
>>> On Wed, Sep 07, 2022 at 08:51:48AM +0200, Hans Verkuil wrote:
>>>> On 05/09/2022 16:44, Laurent Pinchart wrote:
>>>>> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
>>>>>> On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
>>>>>>> 16:45-18:00 Anything else?
>>>>>>
>>>>>> I think it'd be great to have a GPG key signing party at the end of the
>>>>>> meeting.
>>>>>
>>>>> It's a good idea. Could everybody please send their GPG key fingerprint
>>>>> in an e-mail reply to prepare for that ? It can easily be retrieved with
>>>>> 'gpg -K' (make sure to pick the right key if you have multiple of them).
>>>>> I'll start:
>>>>>
>>>>> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
>>>>> 94231B980100EC619AC10E10F045C2B96991256E
>>>>> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
>>>>>
>>>>> If you're generating a key for the occasion, create a primary key with
>>>>> the Certify (C) capability only, and create separate sub-keys for
>>>>> Signature (S) and Encryption (E). There's little reason these days to
>>>>> use less than 4096 bits for the primary key if you opt for RSA. The
>>>>> subkeys should have an expiration date.
>>>>>
>>>>> The primary key can then be moved to safe storage, you will only need
>>>>> the subkeys for daily usage. The primary key will be used only to
>>>>> create new subkeys and to sign other people's keys.
>>>>>
>>>>
>>>> Can you also give instructions on what to do at the key signing party?
>>>>
>>>> I do this so rarely that I always forget what magic gpg commands I need
>>>> to make to sign keys.
>>>>
>>>> If everyone has this information at hand, then we can quickly proceed with
>>>> this on Monday.
>>>
>>> Good point.
>>>
>>> First of all, everybody should make sure that their key is published on
>>> key servers.
>>
>> Which key servers? That's never been clear to me: which key server(s) are
>> you supposed to use?
>
> They are supposed to mirror each other, so any of the main ones should
> do. hkp://keys.gnupg.net, hkp://pgp.mit.edu, hkps://keys.openpgp.org,
> hkp://keyserver.ubuntu.com, ...
Well, hkp://keys.gnupg.net for one is dead, it no longer exists. The other
three are still alive.
keys.openpgp.org and keyserver.ubuntu.com do find my keys, but pgp.mit.edu
doesn't appear to have it. In fact, I can't find your key there either. That
suggests that that one doesn't mirror from others.
So the only two that appear to be reliable are hkps://keys.openpgp.org
and hkp://keyserver.ubuntu.com.
Regards,
Hans
>
>>> I will gather al the keys and print a list that I will hand out to
>>> everybody on Monday. This will be the authoritative source of
>>> information, as anything stored in digital form could theoritically be
>>> tampered with.
>>>
>>> We will go around the table, and everybody will check that their key ID
>>> matches the printed documented (to make sure I haven't tampered with the
>>> printed version they have received), and read it out loud for everybody
>>> to compare with their own printed version (to make sure I've distributed
>>> the same version to everybody). If any mismatch is noticed, people are
>>> expected to shout out loud.
>>>
>>> Then we will verify identities. If we have a laptop with a webcam that
>>> can be hooked up to a projector, we can simply take turns and show a
>>> government-issues ID that clearly displays our name, for people in the
>>> room to compare that with the keys. Once the fingerprints and the
>>> identities are checked, the corresponding keys should be marked as
>>> verified on the paper version.
>>>
>>> The next step is to sign keys. This is something that will happen after
>>> the media summit, and if you have your master key on offline storage,
>>> will happen after you get back home. You will need to download keys from
>>> key servers, verify that the fingerprints match the paper version and
>>> sign the keys.
>>>
>>> The final step is to publish signatures. I'll try to check what the
>>> latest best practices are. One option is to simply publish the
>>> signatures to key servers, but we can also mail them to the key owner,
>>> in an encrypted e-mail to make sure the recipient is the intended
>>> person.
>
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 10:30 ` Hans Verkuil
@ 2022-09-07 11:53 ` Maxime Ripard
0 siblings, 0 replies; 29+ messages in thread
From: Maxime Ripard @ 2022-09-07 11:53 UTC (permalink / raw)
To: Hans Verkuil
Cc: Laurent Pinchart, Sakari Ailus, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Ricardo Ribalda, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
[-- Attachment #1: Type: text/plain, Size: 628 bytes --]
On Wed, Sep 07, 2022 at 12:30:36PM +0200, Hans Verkuil wrote:
> keys.openpgp.org and keyserver.ubuntu.com do find my keys, but pgp.mit.edu
> doesn't appear to have it. In fact, I can't find your key there either. That
> suggests that that one doesn't mirror from others.
>
> So the only two that appear to be reliable are hkps://keys.openpgp.org
> and hkp://keyserver.ubuntu.com.
The kernel.org doc mentions openpgp.org:
https://korg.docs.kernel.org/pgpkeys.html#submitting-keys-to-the-keyring
They also seem fairly active in developing their infrastructure:
https://gitlab.com/hagrid-keyserver/hagrid
Maxime
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 228 bytes --]
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-05 14:44 ` Laurent Pinchart
` (2 preceding siblings ...)
2022-09-07 6:51 ` Hans Verkuil
@ 2022-09-07 7:36 ` Sakari Ailus
2022-09-07 7:44 ` Laurent Pinchart
2022-09-07 11:53 ` Maxime Ripard
` (3 subsequent siblings)
7 siblings, 1 reply; 29+ messages in thread
From: Sakari Ailus @ 2022-09-07 7:36 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Hans Verkuil, linux-media, Kieran Bingham, Nicolas Dufresne,
Benjamin Gaignard, Hidenori Kobayashi, Paul Kocialkowski,
Jacopo Mondi, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On Mon, Sep 05, 2022 at 05:44:26PM +0300, Laurent Pinchart wrote:
> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > 16:45-18:00 Anything else?
> >
> > I think it'd be great to have a GPG key signing party at the end of the
> > meeting.
>
> It's a good idea. Could everybody please send their GPG key fingerprint
> in an e-mail reply to prepare for that ? It can easily be retrieved with
> 'gpg -K' (make sure to pick the right key if you have multiple of them).
> I'll start:
>
> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> 94231B980100EC619AC10E10F045C2B96991256E
> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Maybe we could put the keys here for easier access?
<URL:https://pilvi.retiisi.eu/s/CYZp6Bz4yj4Ak2e>
--
Sakari Ailus
^ permalink raw reply [flat|nested] 29+ messages in thread* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 7:36 ` Sakari Ailus
@ 2022-09-07 7:44 ` Laurent Pinchart
2022-09-07 12:01 ` Sakari Ailus
0 siblings, 1 reply; 29+ messages in thread
From: Laurent Pinchart @ 2022-09-07 7:44 UTC (permalink / raw)
To: Sakari Ailus
Cc: Hans Verkuil, linux-media, Kieran Bingham, Nicolas Dufresne,
Benjamin Gaignard, Hidenori Kobayashi, Paul Kocialkowski,
Jacopo Mondi, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On Wed, Sep 07, 2022 at 07:36:42AM +0000, Sakari Ailus wrote:
> On Mon, Sep 05, 2022 at 05:44:26PM +0300, Laurent Pinchart wrote:
> > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > > 16:45-18:00 Anything else?
> > >
> > > I think it'd be great to have a GPG key signing party at the end of the
> > > meeting.
> >
> > It's a good idea. Could everybody please send their GPG key fingerprint
> > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > I'll start:
> >
> > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> > 94231B980100EC619AC10E10F045C2B96991256E
> > uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
>
> Maybe we could put the keys here for easier access?
I was planning to consolidate the list and send it to all attendees
before the workshop.
> <URL:https://pilvi.retiisi.eu/s/CYZp6Bz4yj4Ak2e>
--
Regards,
Laurent Pinchart
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 7:44 ` Laurent Pinchart
@ 2022-09-07 12:01 ` Sakari Ailus
0 siblings, 0 replies; 29+ messages in thread
From: Sakari Ailus @ 2022-09-07 12:01 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Hans Verkuil, linux-media, Kieran Bingham, Nicolas Dufresne,
Benjamin Gaignard, Hidenori Kobayashi, Paul Kocialkowski,
Jacopo Mondi, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On Wed, Sep 07, 2022 at 10:44:15AM +0300, Laurent Pinchart wrote:
> On Wed, Sep 07, 2022 at 07:36:42AM +0000, Sakari Ailus wrote:
> > On Mon, Sep 05, 2022 at 05:44:26PM +0300, Laurent Pinchart wrote:
> > > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > > > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > > > 16:45-18:00 Anything else?
> > > >
> > > > I think it'd be great to have a GPG key signing party at the end of the
> > > > meeting.
> > >
> > > It's a good idea. Could everybody please send their GPG key fingerprint
> > > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > > I'll start:
> > >
> > > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> > > 94231B980100EC619AC10E10F045C2B96991256E
> > > uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
> >
> > Maybe we could put the keys here for easier access?
>
> I was planning to consolidate the list and send it to all attendees
> before the workshop.
That would work, too. It's probably still about as easy to put them on that
page.
> > <URL:https://pilvi.retiisi.eu/s/CYZp6Bz4yj4Ak2e>
--
Sakari Ailus
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-05 14:44 ` Laurent Pinchart
` (3 preceding siblings ...)
2022-09-07 7:36 ` Sakari Ailus
@ 2022-09-07 11:53 ` Maxime Ripard
2022-09-30 20:46 ` Maxime Ripard
2022-09-07 12:46 ` Kieran Bingham
` (2 subsequent siblings)
7 siblings, 1 reply; 29+ messages in thread
From: Maxime Ripard @ 2022-09-07 11:53 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Sakari Ailus, Hans Verkuil, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Ricardo Ribalda, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
[-- Attachment #1: Type: text/plain, Size: 1787 bytes --]
On Mon, Sep 05, 2022 at 05:44:26PM +0300, Laurent Pinchart wrote:
> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > 16:45-18:00 Anything else?
> >
> > I think it'd be great to have a GPG key signing party at the end of the
> > meeting.
>
> It's a good idea. Could everybody please send their GPG key fingerprint
> in an e-mail reply to prepare for that ? It can easily be retrieved with
> 'gpg -K' (make sure to pick the right key if you have multiple of them).
> I'll start:
>
> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> 94231B980100EC619AC10E10F045C2B96991256E
> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
>
> If you're generating a key for the occasion, create a primary key with
> the Certify (C) capability only, and create separate sub-keys for
> Signature (S) and Encryption (E). There's little reason these days to
> use less than 4096 bits for the primary key if you opt for RSA. The
> subkeys should have an expiration date.
>
> The primary key can then be moved to safe storage, you will only need
> the subkeys for daily usage. The primary key will be used only to
> create new subkeys and to sign other people's keys.
sec# ed25519 2018-09-15 [C] [expires: 2023-03-17]
BE5675C37E818C8B5764241C254BCFC56BF6CE8D
uid [ultimate] Maxime Ripard <maxime.ripard@anandra.org>
uid [ultimate] Maxime Ripard <mripard@kernel.org>
uid [ultimate] Maxime Ripard (Work Address) <maxime@cerno.tech>
ssb> cv25519 2018-09-15 [E] [expires: 2023-03-17]
ssb> ed25519 2018-09-15 [S] [expires: 2023-03-17]
ssb> ed25519 2018-09-15 [A] [expires: 2023-03-17]
Thanks!
Maxime
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 228 bytes --]
^ permalink raw reply [flat|nested] 29+ messages in thread* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 11:53 ` Maxime Ripard
@ 2022-09-30 20:46 ` Maxime Ripard
2022-09-30 20:52 ` Laurent Pinchart
0 siblings, 1 reply; 29+ messages in thread
From: Maxime Ripard @ 2022-09-30 20:46 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Sakari Ailus, Hans Verkuil, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Ricardo Ribalda, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
[-- Attachment #1: Type: text/plain, Size: 1986 bytes --]
Hi,
On Wed, Sep 07, 2022 at 01:53:51PM +0200, Maxime Ripard wrote:
> On Mon, Sep 05, 2022 at 05:44:26PM +0300, Laurent Pinchart wrote:
> > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > > 16:45-18:00 Anything else?
> > >
> > > I think it'd be great to have a GPG key signing party at the end of the
> > > meeting.
> >
> > It's a good idea. Could everybody please send their GPG key fingerprint
> > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > I'll start:
> >
> > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> > 94231B980100EC619AC10E10F045C2B96991256E
> > uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
> >
> > If you're generating a key for the occasion, create a primary key with
> > the Certify (C) capability only, and create separate sub-keys for
> > Signature (S) and Encryption (E). There's little reason these days to
> > use less than 4096 bits for the primary key if you opt for RSA. The
> > subkeys should have an expiration date.
> >
> > The primary key can then be moved to safe storage, you will only need
> > the subkeys for daily usage. The primary key will be used only to
> > create new subkeys and to sign other people's keys.
>
> sec# ed25519 2018-09-15 [C] [expires: 2023-03-17]
> BE5675C37E818C8B5764241C254BCFC56BF6CE8D
> uid [ultimate] Maxime Ripard <maxime.ripard@anandra.org>
> uid [ultimate] Maxime Ripard <mripard@kernel.org>
> uid [ultimate] Maxime Ripard (Work Address) <maxime@cerno.tech>
I'm not entirely sure what happened, but it looks like all the
signatures I received so far (Laurent, Jernej, Ricardo, Kieran, Jacopo
and Chen-Yu) have been missing that UID
Could you make sure that it's signed?
Thanks!
Maxime
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 228 bytes --]
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-30 20:46 ` Maxime Ripard
@ 2022-09-30 20:52 ` Laurent Pinchart
2022-10-01 10:07 ` Maxime Ripard
0 siblings, 1 reply; 29+ messages in thread
From: Laurent Pinchart @ 2022-09-30 20:52 UTC (permalink / raw)
To: Maxime Ripard
Cc: Sakari Ailus, Hans Verkuil, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Ricardo Ribalda, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
Hi Maxime,
On Fri, Sep 30, 2022 at 10:46:42PM +0200, Maxime Ripard wrote:
> On Wed, Sep 07, 2022 at 01:53:51PM +0200, Maxime Ripard wrote:
> > On Mon, Sep 05, 2022 at 05:44:26PM +0300, Laurent Pinchart wrote:
> > > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > > > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > > > 16:45-18:00 Anything else?
> > > >
> > > > I think it'd be great to have a GPG key signing party at the end of the
> > > > meeting.
> > >
> > > It's a good idea. Could everybody please send their GPG key fingerprint
> > > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > > I'll start:
> > >
> > > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> > > 94231B980100EC619AC10E10F045C2B96991256E
> > > uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
> > >
> > > If you're generating a key for the occasion, create a primary key with
> > > the Certify (C) capability only, and create separate sub-keys for
> > > Signature (S) and Encryption (E). There's little reason these days to
> > > use less than 4096 bits for the primary key if you opt for RSA. The
> > > subkeys should have an expiration date.
> > >
> > > The primary key can then be moved to safe storage, you will only need
> > > the subkeys for daily usage. The primary key will be used only to
> > > create new subkeys and to sign other people's keys.
> >
> > sec# ed25519 2018-09-15 [C] [expires: 2023-03-17]
> > BE5675C37E818C8B5764241C254BCFC56BF6CE8D
> > uid [ultimate] Maxime Ripard <maxime.ripard@anandra.org>
> > uid [ultimate] Maxime Ripard <mripard@kernel.org>
> > uid [ultimate] Maxime Ripard (Work Address) <maxime@cerno.tech>
>
> I'm not entirely sure what happened, but it looks like all the
> signatures I received so far (Laurent, Jernej, Ricardo, Kieran, Jacopo
> and Chen-Yu) have been missing that UID
>
> Could you make sure that it's signed?
The key I have here doesn't have that UID. To what key server have you
pushed it ?
--
Regards,
Laurent Pinchart
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-30 20:52 ` Laurent Pinchart
@ 2022-10-01 10:07 ` Maxime Ripard
2022-10-03 0:20 ` Laurent Pinchart
0 siblings, 1 reply; 29+ messages in thread
From: Maxime Ripard @ 2022-10-01 10:07 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Sakari Ailus, Hans Verkuil, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Ricardo Ribalda, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On Fri, Sep 30, 2022 at 11:52:30PM +0300, Laurent Pinchart wrote:
> Hi Maxime,
>
> On Fri, Sep 30, 2022 at 10:46:42PM +0200, Maxime Ripard wrote:
> > On Wed, Sep 07, 2022 at 01:53:51PM +0200, Maxime Ripard wrote:
> > > On Mon, Sep 05, 2022 at 05:44:26PM +0300, Laurent Pinchart wrote:
> > > > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > > > > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > > > > 16:45-18:00 Anything else?
> > > > >
> > > > > I think it'd be great to have a GPG key signing party at the end of the
> > > > > meeting.
> > > >
> > > > It's a good idea. Could everybody please send their GPG key fingerprint
> > > > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > > > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > > > I'll start:
> > > >
> > > > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> > > > 94231B980100EC619AC10E10F045C2B96991256E
> > > > uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
> > > >
> > > > If you're generating a key for the occasion, create a primary key with
> > > > the Certify (C) capability only, and create separate sub-keys for
> > > > Signature (S) and Encryption (E). There's little reason these days to
> > > > use less than 4096 bits for the primary key if you opt for RSA. The
> > > > subkeys should have an expiration date.
> > > >
> > > > The primary key can then be moved to safe storage, you will only need
> > > > the subkeys for daily usage. The primary key will be used only to
> > > > create new subkeys and to sign other people's keys.
> > >
> > > sec# ed25519 2018-09-15 [C] [expires: 2023-03-17]
> > > BE5675C37E818C8B5764241C254BCFC56BF6CE8D
> > > uid [ultimate] Maxime Ripard <maxime.ripard@anandra.org>
> > > uid [ultimate] Maxime Ripard <mripard@kernel.org>
> > > uid [ultimate] Maxime Ripard (Work Address) <maxime@cerno.tech>
> >
> > I'm not entirely sure what happened, but it looks like all the
> > signatures I received so far (Laurent, Jernej, Ricardo, Kieran, Jacopo
> > and Chen-Yu) have been missing that UID
> >
> > Could you make sure that it's signed?
>
> The key I have here doesn't have that UID. To what key server have you
> pushed it ?
It is published on keys.openpgp.org and I sent it yesterday to
keyserver.ubuntu.com.
Maxime
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-10-01 10:07 ` Maxime Ripard
@ 2022-10-03 0:20 ` Laurent Pinchart
2022-10-10 8:26 ` Maxime Ripard
0 siblings, 1 reply; 29+ messages in thread
From: Laurent Pinchart @ 2022-10-03 0:20 UTC (permalink / raw)
To: Maxime Ripard
Cc: Sakari Ailus, Hans Verkuil, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Ricardo Ribalda, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On Sat, Oct 01, 2022 at 12:07:41PM +0200, Maxime Ripard wrote:
> On Fri, Sep 30, 2022 at 11:52:30PM +0300, Laurent Pinchart wrote:
> > On Fri, Sep 30, 2022 at 10:46:42PM +0200, Maxime Ripard wrote:
> > > On Wed, Sep 07, 2022 at 01:53:51PM +0200, Maxime Ripard wrote:
> > > > On Mon, Sep 05, 2022 at 05:44:26PM +0300, Laurent Pinchart wrote:
> > > > > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > > > > > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > > > > > 16:45-18:00 Anything else?
> > > > > >
> > > > > > I think it'd be great to have a GPG key signing party at the end of the
> > > > > > meeting.
> > > > >
> > > > > It's a good idea. Could everybody please send their GPG key fingerprint
> > > > > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > > > > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > > > > I'll start:
> > > > >
> > > > > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> > > > > 94231B980100EC619AC10E10F045C2B96991256E
> > > > > uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
> > > > >
> > > > > If you're generating a key for the occasion, create a primary key with
> > > > > the Certify (C) capability only, and create separate sub-keys for
> > > > > Signature (S) and Encryption (E). There's little reason these days to
> > > > > use less than 4096 bits for the primary key if you opt for RSA. The
> > > > > subkeys should have an expiration date.
> > > > >
> > > > > The primary key can then be moved to safe storage, you will only need
> > > > > the subkeys for daily usage. The primary key will be used only to
> > > > > create new subkeys and to sign other people's keys.
> > > >
> > > > sec# ed25519 2018-09-15 [C] [expires: 2023-03-17]
> > > > BE5675C37E818C8B5764241C254BCFC56BF6CE8D
> > > > uid [ultimate] Maxime Ripard <maxime.ripard@anandra.org>
> > > > uid [ultimate] Maxime Ripard <mripard@kernel.org>
> > > > uid [ultimate] Maxime Ripard (Work Address) <maxime@cerno.tech>
> > >
> > > I'm not entirely sure what happened, but it looks like all the
> > > signatures I received so far (Laurent, Jernej, Ricardo, Kieran, Jacopo
> > > and Chen-Yu) have been missing that UID
> > >
> > > Could you make sure that it's signed?
> >
> > The key I have here doesn't have that UID. To what key server have you
> > pushed it ?
>
> It is published on keys.openpgp.org and I sent it yesterday to
> keyserver.ubuntu.com.
The latter gave me your third UID, the former didn't.
--
Regards,
Laurent Pinchart
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-10-03 0:20 ` Laurent Pinchart
@ 2022-10-10 8:26 ` Maxime Ripard
0 siblings, 0 replies; 29+ messages in thread
From: Maxime Ripard @ 2022-10-10 8:26 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Sakari Ailus, Hans Verkuil, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Ricardo Ribalda, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
[-- Attachment #1: Type: text/plain, Size: 2931 bytes --]
On Mon, Oct 03, 2022 at 03:20:39AM +0300, Laurent Pinchart wrote:
> On Sat, Oct 01, 2022 at 12:07:41PM +0200, Maxime Ripard wrote:
> > On Fri, Sep 30, 2022 at 11:52:30PM +0300, Laurent Pinchart wrote:
> > > On Fri, Sep 30, 2022 at 10:46:42PM +0200, Maxime Ripard wrote:
> > > > On Wed, Sep 07, 2022 at 01:53:51PM +0200, Maxime Ripard wrote:
> > > > > On Mon, Sep 05, 2022 at 05:44:26PM +0300, Laurent Pinchart wrote:
> > > > > > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > > > > > > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > > > > > > 16:45-18:00 Anything else?
> > > > > > >
> > > > > > > I think it'd be great to have a GPG key signing party at the end of the
> > > > > > > meeting.
> > > > > >
> > > > > > It's a good idea. Could everybody please send their GPG key fingerprint
> > > > > > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > > > > > 'gpg -K' (make sure to pick the right key if you have multiple of them).
> > > > > > I'll start:
> > > > > >
> > > > > > sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> > > > > > 94231B980100EC619AC10E10F045C2B96991256E
> > > > > > uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
> > > > > >
> > > > > > If you're generating a key for the occasion, create a primary key with
> > > > > > the Certify (C) capability only, and create separate sub-keys for
> > > > > > Signature (S) and Encryption (E). There's little reason these days to
> > > > > > use less than 4096 bits for the primary key if you opt for RSA. The
> > > > > > subkeys should have an expiration date.
> > > > > >
> > > > > > The primary key can then be moved to safe storage, you will only need
> > > > > > the subkeys for daily usage. The primary key will be used only to
> > > > > > create new subkeys and to sign other people's keys.
> > > > >
> > > > > sec# ed25519 2018-09-15 [C] [expires: 2023-03-17]
> > > > > BE5675C37E818C8B5764241C254BCFC56BF6CE8D
> > > > > uid [ultimate] Maxime Ripard <maxime.ripard@anandra.org>
> > > > > uid [ultimate] Maxime Ripard <mripard@kernel.org>
> > > > > uid [ultimate] Maxime Ripard (Work Address) <maxime@cerno.tech>
> > > >
> > > > I'm not entirely sure what happened, but it looks like all the
> > > > signatures I received so far (Laurent, Jernej, Ricardo, Kieran, Jacopo
> > > > and Chen-Yu) have been missing that UID
> > > >
> > > > Could you make sure that it's signed?
> > >
> > > The key I have here doesn't have that UID. To what key server have you
> > > pushed it ?
> >
> > It is published on keys.openpgp.org and I sent it yesterday to
> > keyserver.ubuntu.com.
>
> The latter gave me your third UID, the former didn't.
It looks like you can only push new signatures through --send-keys, but
not new UID. It should work now
Maxime
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 228 bytes --]
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-05 14:44 ` Laurent Pinchart
` (4 preceding siblings ...)
2022-09-07 11:53 ` Maxime Ripard
@ 2022-09-07 12:46 ` Kieran Bingham
2022-09-08 8:47 ` Jacopo Mondi
2022-09-10 4:23 ` Chen-Yu Tsai
2022-09-10 11:18 ` Laurent Pinchart
7 siblings, 1 reply; 29+ messages in thread
From: Kieran Bingham @ 2022-09-07 12:46 UTC (permalink / raw)
To: Laurent Pinchart, Sakari Ailus
Cc: Hans Verkuil, linux-media, Nicolas Dufresne, Benjamin Gaignard,
Hidenori Kobayashi, Paul Kocialkowski, Jacopo Mondi,
Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
Quoting Laurent Pinchart (2022-09-05 15:44:26)
> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > I think it'd be great to have a GPG key signing party at the end of the
> > meeting.
>
> It's a good idea. Could everybody please send their GPG key fingerprint
> in an e-mail reply to prepare for that ? It can easily be retrieved with
> 'gpg -K' (make sure to pick the right key if you have multiple of them).
sec rsa4096 2015-09-25 [SC] [expires: 2024-09-01]
902DD7983FBD28FDE372D47AA11E467210A461FD
uid [ultimate] Kieran Bingham <kieran.bingham@ideasonboard.com>
uid [ultimate] Kieran Bingham (Work Encryption Key) <kieran@linuxembedded.co.uk>
uid [ultimate] Kieran Bingham (Alias) <kieran@linuxembedded.uk>
uid [ultimate] Kieran Bingham <kbingham@kernel.org>
--
Kieran
^ permalink raw reply [flat|nested] 29+ messages in thread* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-07 12:46 ` Kieran Bingham
@ 2022-09-08 8:47 ` Jacopo Mondi
0 siblings, 0 replies; 29+ messages in thread
From: Jacopo Mondi @ 2022-09-08 8:47 UTC (permalink / raw)
To: Kieran Bingham
Cc: Laurent Pinchart, Sakari Ailus, Hans Verkuil, linux-media,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On Wed, Sep 07, 2022 at 01:46:19PM +0100, Kieran Bingham wrote:
> Quoting Laurent Pinchart (2022-09-05 15:44:26)
> > On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > > I think it'd be great to have a GPG key signing party at the end of the
> > > meeting.
> >
> > It's a good idea. Could everybody please send their GPG key fingerprint
> > in an e-mail reply to prepare for that ? It can easily be retrieved with
> > 'gpg -K' (make sure to pick the right key if you have multiple of them).
sec# rsa4096 2016-10-19 [SC]
72392EDC88144A65C701EA9BA5826A2587AD026B
uid [ultimate] Jacopo Mondi <jacopo@jmondi.org>
ssb rsa4096 2016-10-19 [E]
ssb rsa4096 2016-10-20 [S]
^ permalink raw reply [flat|nested] 29+ messages in thread
* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-05 14:44 ` Laurent Pinchart
` (5 preceding siblings ...)
2022-09-07 12:46 ` Kieran Bingham
@ 2022-09-10 4:23 ` Chen-Yu Tsai
2022-09-10 11:18 ` Laurent Pinchart
7 siblings, 0 replies; 29+ messages in thread
From: Chen-Yu Tsai @ 2022-09-10 4:23 UTC (permalink / raw)
To: Laurent Pinchart
Cc: Sakari Ailus, Hans Verkuil, linux-media, Kieran Bingham,
Nicolas Dufresne, Benjamin Gaignard, Hidenori Kobayashi,
Paul Kocialkowski, Jacopo Mondi, Ricardo Ribalda, Maxime Ripard,
Daniel Scally, Jernej Škrabec, Dave Stevenson, Philipp Zabel
On Mon, Sep 5, 2022 at 10:46 PM Laurent Pinchart
<laurent.pinchart@ideasonboard.com> wrote:
>
> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > 16:45-18:00 Anything else?
> >
> > I think it'd be great to have a GPG key signing party at the end of the
> > meeting.
>
> It's a good idea. Could everybody please send their GPG key fingerprint
> in an e-mail reply to prepare for that ? It can easily be retrieved with
> 'gpg -K' (make sure to pick the right key if you have multiple of them).
> I'll start:
>
> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> 94231B980100EC619AC10E10F045C2B96991256E
> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
sec rsa4096/0xC94035C21B4F2AEB 2017-03-14 [SC] [expires: 2023-02-11]
B3F2469D78D78BD09D366F37C94035C21B4F2AEB
uid [ultimate] Chen-Yu Tsai <wens@csie.org>
uid [ultimate] Chen-Yu Tsai <wens@freedesktop.org>
uid [ultimate] Chen-Yu Tsai <wens@kernel.org>
uid [ultimate] Chen-Yu Tsai <wenst@chromium.org>
ssb rsa4096/0x871A74AAB8E0BE8E 2017-03-14 [E] [expires: 2023-02-11]
ssb rsa4096/0x389A54219C0F2430 2017-03-15 [S] [expires: 2023-02-11]
Thanks!
^ permalink raw reply [flat|nested] 29+ messages in thread* Re: [ANN] Media Summit at ELCE Dublin, September 12: Draft Agenda V2
2022-09-05 14:44 ` Laurent Pinchart
` (6 preceding siblings ...)
2022-09-10 4:23 ` Chen-Yu Tsai
@ 2022-09-10 11:18 ` Laurent Pinchart
7 siblings, 0 replies; 29+ messages in thread
From: Laurent Pinchart @ 2022-09-10 11:18 UTC (permalink / raw)
To: Sakari Ailus
Cc: Hans Verkuil, linux-media, Kieran Bingham, Nicolas Dufresne,
Benjamin Gaignard, Hidenori Kobayashi, Paul Kocialkowski,
Jacopo Mondi, Ricardo Ribalda, Maxime Ripard, Daniel Scally,
Jernej Škrabec, Dave Stevenson, Philipp Zabel
On Mon, Sep 05, 2022 at 05:44:27PM +0300, Laurent Pinchart wrote:
> On Mon, Sep 05, 2022 at 01:41:11PM +0000, Sakari Ailus wrote:
> > On Tue, Aug 23, 2022 at 12:53:44PM +0200, Hans Verkuil wrote:
> > > 16:45-18:00 Anything else?
> >
> > I think it'd be great to have a GPG key signing party at the end of the
> > meeting.
>
> It's a good idea. Could everybody please send their GPG key fingerprint
> in an e-mail reply to prepare for that ? It can easily be retrieved with
> 'gpg -K' (make sure to pick the right key if you have multiple of them).
> I'll start:
>
> sec rsa4096/0xF045C2B96991256E 2014-10-09 [C]
> 94231B980100EC619AC10E10F045C2B96991256E
> uid [ultimate] Laurent Pinchart <laurent.pinchart@ideasonboard.com>
>
> If you're generating a key for the occasion, create a primary key with
> the Certify (C) capability only, and create separate sub-keys for
> Signature (S) and Encryption (E). There's little reason these days to
> use less than 4096 bits for the primary key if you opt for RSA. The
> subkeys should have an expiration date.
>
> The primary key can then be moved to safe storage, you will only need
> the subkeys for daily usage. The primary key will be used only to
> create new subkeys and to sign other people's keys.
I have received keys for half of the attendees. If you are in the list
below, have a GPG key, and would like to participate in the key signing,
please send your public key by e-mail today.
Benjamin Gaignard
Daniel Scally
Dave Stevenson
Hugues Fruchet
Michael Olbrich
Michael Tretter
Nicolas Dufresne
Niklas Söderlund
Philipp Zabel
--
Regards,
Laurent Pinchart
^ permalink raw reply [flat|nested] 29+ messages in thread