Skip to main content

Key signing party at fosdem 2024

I'm organizing a GnuPG key signing party in order to bolster our web of trust, since there is no official ksp this year.

I have organized a few in the past using tools like biglumber (website is gone, if someone know of a replacement or where the source code of site is, I might end up running one again) and others tools. I've also run once the KSP at FOSDEM and helped running it a few other times. 

 

=== Details below ===

When, Where 

We'll meet in front of the infodesk stand in building K around 12:00 Sunday Feb 4th 2024. I'll have a sing of some sort with KSP and or Key Signing Party. Once enough participants show up we will move outside to proceed with the party.

What to Bring

Warm cloths as the party will happen outside this year, like in the good old days. I hope it won't rain, but it might.

Piece of papers with your fingerprint written on them. Each piece should look like below:

 $ gpg --fingerprint 34246C61F792FBCC1F23BFF296BD1F38FEA32B4D
pub   ed25519 2022-03-01 [SC]
      3424 6C61 F792 FBCC 1F23  BFF2 96BD 1F38 FEA3 2B4D
uid           [ultimate] Ludovic Hirlimann (ECC key) <ludovic@hirlimann.net>
sub   cv25519 2022-03-01 [E]
You can have multiple keys on the piece of paper.  Bring at least fifty (50) of these so you have enough. A good KP a FOSDEM is above a hundred participant with a hundred showing up. I don't expect these numbers, but be prepared to hand over a lot of these pieces of papers

Time, the KSP take at least one hour to two hours depending on the number of people showing up.

Some sort of ID.

A mask, even if outside, it's better to wear one than not - when there are some many people coming from all over Europe.

What not to bring

A laptop or a smartphone. We'll use paper exclusively.

Anger, impatience - ksp are parties so it should be fun :-)

How we'll proceed

We'll form a line. Split the line in two and make the last person in the line face the first, the second to last the second etc. Once key exchanged and ID verified, we'll step one step to the right. The now first in line will face the then second to last, etc. And we loop on that until the initial first in line exchanges with the initial second to last.
Sounds complicated? It's not you'll see when in it.

Home Work

Once back home, make sure your machine can send emails (see https://unix.stackexchange.com/questions/159608/how-to-configure-postfix-to-send-mail-to-external-smtp-server for instance). Install Caff  or Pius. Do that quickly, as it's fresh in your mind.

Edit: I just printed mini cards from moo with my fingerprint on it.

Comments

Popular posts from this blog

Firefox OS's story from a mozilla insider not working on the project

  I clearly remember, but can't date it. I was working for Mozilla messaging at the time ( momo ), being the QA lead for Thunderbird. It was at the end of one of the Mozilla All-hands, maybe in 2011 or 2012. At one of the ending keynotes, we were introduced to Boot 2 Gecko. A hack that would let US - Mozilla own the platform to run a mobile browser on. At the time, the iPhone was going strong and Google was trying to catch up with Android. MeeGo had been in development at Nokia for a while but was going nowhere even when Intel tried to help. Blackberry was slowly starting to die. In the Silicon Valley everything was about mobile, mobile, mobile and the emerging South Easter Asian market, where people would skip computers and use smartphones to join the internet revolution. We were struggling with Chrome and the massive investment by Google to take market share. Our Firefox port on Android was having loads of issues. We were denied by Apple's policies to be present on iPhones....

Gandi , je suis énervé, la partie email

 En mai dernier j'avais migré le service de messagerie de mon domaine depuis google (offre historique datant de 2006) gratuite vers le service de Gandi. J'avais les contraintes suivantes : un peu d'espace, on passait de 15GB/utilisateurs tentative de reprise de l'historique Neuf utilisateurs calendrier+ carnet d'adresse du webmail pop/imap/smtp avec du TLS dedans Ayant un domaine historique, j'avais droit à cinq boites gratuites. Mais, je devais m'acquitter du service supplémentaire jusqu'à la prochaine échéance de renouvellement du domaine, soit 2025. Avec des boites mail à 3Gb, cela faisait une facture de 400€. Avec les dernières annonces de Gandi, à partir de la fin d'année, il me faudrait débourser en sus 25€/mois pour garder un service équivalent et à partir de 2025 45€/mois. La très mauvaise surprise du mercredi. J'ai donc commencé à chercher des alternatives, sachant qu'à terme, j'aurais au moins deux utilisateurs de plus. Point p...