PGP keysigning at KVM Forum 2025

PGP keysigning at KVM Forum 2025

[Andrea Bolognani]

Hi all,

last year in Brno, a handful of people had decent luck gathering PGP
signatures by performing impromptu verification during casual hallway
chats.

Of course that was only possible because both parties had come to the
conference prepared, specifically carrying with them printouts of
their key's information in addition to their government IDs.

I suggest that we encourage more of that at this year's conference.

If you are attending KVM Forum and are interested in strenghtening
the PGP web of trust, prepare little paper slips with your key's
details on them ahead of time and bring them to the conference; then,
while you're chatting with another attendee, ask whether they'd be
interested in exchanging signatures.

Please speak up if you think there's any reason to discourage this
practice or to avoid encouraging it.

Happy signing :)

-- 
Andrea Bolognani / Red Hat / Virtualization

Re: PGP keysigning at KVM Forum 2025

[Brian Cain]

On 8/25/2025 7:17 AM, Andrea Bolognani wrote:
> Hi all,
>
> last year in Brno, a handful of people had decent luck gathering PGP
> signatures by performing impromptu verification during casual hallway
> chats.
>
> Of course that was only possible because both parties had come to the
> conference prepared, specifically carrying with them printouts of
> their key's information in addition to their government IDs.
>
> I suggest that we encourage more of that at this year's conference.
>
> If you are attending KVM Forum and are interested in strenghtening
> the PGP web of trust, prepare little paper slips with your key's
> details on them ahead of time and bring them to the conference; then,

Great suggestion, thanks.

Specifically what information should be on the slips?  uids, 
fingerprint, and ... anything else?

Is there a quick command to maybe dump gpg output to a pdf with N copies 
of this info on a page?


> while you're chatting with another attendee, ask whether they'd be
> interested in exchanging signatures.
>
> Please speak up if you think there's any reason to discourage this
> practice or to avoid encouraging it.
>
> Happy signing :)
>

Re: PGP keysigning at KVM Forum 2025

[Andrea Bolognani]

On Tue, Aug 26, 2025 at 02:17:31PM -0500, Brian Cain wrote:
> On 8/25/2025 7:17 AM, Andrea Bolognani wrote:
> > If you are attending KVM Forum and are interested in strenghtening
> > the PGP web of trust, prepare little paper slips with your key's
> > details on them ahead of time and bring them to the conference; then,
>
> Specifically what information should be on the slips?  uids, fingerprint,
> and ... anything else?

The output of `gpg --list-keys YOURKEY` is all you need.

> Is there a quick command to maybe dump gpg output to a pdf with N copies of
> this info on a page?

Apparently there used to exist one or more websites that would
generate this for you, but they're not longer operational due to
the... Unfortunate state of the keyserver network.

Last year I created my own template using LibreOffice Writer. I was
able to fit 2x13 copies per A4 page, and it only took maybe 15
minutes to prepare the whole thing.

-- 
Andrea Bolognani / Red Hat / Virtualization

Re: PGP keysigning at KVM Forum 2025

[Stefan Hajnoczi]

Thanks for the reminder, Andrea! I will come prepared and am happy to sign keys.

Stefan