Taking good care of your keyring

Recently I was surprised to find that many of the rules I took for granted when dealing with an OpenPGP keyring, and the other activities associated with a web of trust, were new to some people I spoke to. These rules are born from a mixture of experience, accepted good practice, and wider reading, with…

Translation fail

I got this in my Debian mailbox the other day (it’s an invitation to Facebook, in French): Bonjour Jonathan, Je vous ai invite rejoindre Facebook recemment et je voulais vous rappeler que de que vous serez enregistre, vous pourrez vous connecter […] and so on, right down to the end where there is this gem:…

Improving the resilience of the Web of Trust

(this is a post in two parts) At the BoF of GPG Key Management: Best Practices, dkg had two immediate recommendations for improving WoT resilience: Regularly refresh your local keyring from the key servers; If you have spare space and transit, provide a key server to take part in the pool. Regular Refreshes This is…

Batch importing caff signatures

Having swapped details with many, many people at Debconf, and then been away for a week after that, I found myself with an overflowing mailbox and a long task of “open mail, provide pass-phrase, pipe to gpg –import“. I wanted a way to batch-import all these signatures (there are three times as many, because my…

Home, James

Since I didn’t actually come home from Debconf, but instead took a further week’s holiday and lazed around by the beach, I haven’t sat down to write anything about it yet. Most importantly, I should say thank you to Joey Hess, Steve McIntyre and Stefano Zacchiroli for arranging the Debconf Newbies programme, without which I…