Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status
summaryrefslogtreecommitdiff
path: root/glep-0063.rst
Commit message (Collapse)AuthorAgeFilesLines
* glep-0063: Add section about the Gentoo keyserverMike Gilbert2021-01-041-8/+24
| | | | | | Closes: https://bugs.gentoo.org/760923 Signed-off-by: Mike Gilbert <floppym@gentoo.org> Signed-off-by: Ulrich Müller <ulm@gentoo.org>
* Replace outdated mail archive URLs.Ulrich Müller2019-11-111-4/+5
| | | | | | | | | | | | | | | | | | Globally replace URLs pointing to gmane.org or marc.theaimsgroup.com, preferably by archives.gentoo.org if the article is available there. As suggested by robbat2, also add the Message-ID and bibliographical information, in order to have a permanent reference to the message. Notes on single GLEPs: - GLEP 40: http://thread.gmane.org/gmane.linux.gentoo.devel/31060 had pointed to the first message of the thread (by g2boojum), not to stuart's followup. Corrected. - GLEP 57: Two messages in gentoo-dev from January/February 2005 and one message in gentoo-security from April 2003 are missing from Gentoo archives. Use marc.info instead. Signed-off-by: Ulrich Müller <ulm@gentoo.org>
* glep-0063: Require encryption subkey, and make primary certify-onlyMichał Górny2019-05-021-14/+29
| | | | | | | | | | | | | | | | | Following the recent mailing list discussion indicating that developers are taking GLEP 63 as only source of truth about OpenPGP keys, and can make assumption that if encryption key is not listed there they should not have one. Amend the specification to extend it beyond the previous limited scope of commit signing, and require an encryption key appropriately. This matches the GnuPG defaults. While at it, add a recommendation that the primary key is certify-only. Other usage is implicitly discouraged anyway via requiring subkeys. Originally this recommendation was omitted as I wasn't aware that gpg had a (hidden) option to change usage of existing keys. Closes: https://bugs.gentoo.org/681802 Signed-off-by: Michał Górny <mgorny@gentoo.org>
* Update URI of Creative Commons license.Ulrich Müller2019-03-031-1/+1
| | | | Signed-off-by: Ulrich Müller <ulm@gentoo.org>
* glep-0063: Require @gentoo.org UID on keysMichał Górny2018-07-291-3/+7
|
* glep-0063: Add initial posting date for the updateMichał Górny2018-07-291-1/+1
|
* glep-0063: Unify punctuationMichał Górny2018-07-291-11/+11
| | | | Requested-by: Ulrich Müller <ulm@gentoo.org>
* glep-0063: Extend SHA-2 requirement to self-signatures on subkeysMichał Górny2018-07-291-1/+4
|
* glep-0063: Remove gpg.conf bitsMichał Górny2018-07-291-51/+9
| | | | | | | | Remove the gpg.conf bits from recommended and minimal specification. Apparently they are seriously obsolete and worse than the modern defaults. While at it, editorial corrections to 'SHA2' bit. Requested-by: Richard Yao <ryao@gentoo.org>
* glep-0063: Remove whitespace from LDAP fieldMichał Górny2018-07-291-4/+4
| | | | Requested-by: Robin H. Johnson <robbat2@gentoo.org>
* glep-0063: Disallow using DSA keysMichał Górny2018-07-291-4/+4
| | | | | | There really is no technical reason to use DSA keys and people who are still using old DSA keys should finally replace them, so remove them from the minimal requirements.
* glep-0063: Require renewal 2 weeks before expirationMichał Górny2018-07-291-1/+8
| | | | | Add a rule requesting renewal of keys at least two weeks before their expiration date, in order to give services time to refresh.
* glep-0063: Update and unify expiration termMichał Górny2018-07-291-7/+9
| | | | | | | | Replace the disjoint 'minimum' and 'recommendation' for expiration with a single requirement. Make it 2.5 years with recommended annual renewal to a fixed day of the year (2 years + some grace time for renewal). Also, remove disjoint expiration recommendation for the primary key and subkeys since many developers fail at implementing that anyway.
* glep-0063: Stop recommending DSA subkeysMichał Górny2018-07-291-10/+8
| | | | | | There is really no technical reason to use DSA these days, and we should focus on having a single recommendation. DSA keys are still permitted via 'minimal' requirements.
* glep-0063: Allow ECC curve 25519 keysMichał Górny2018-07-291-0/+4
| | | | | | | Optionally allow using ECC curve 25519 keys. We already have developers using those keys, and given that they are supported by GnuPG 2.2, there's probably no reason to ban them. However, they're not recommended due to interoperability issues.
* glep-0063: Change the recommended RSA key size to 2048 bitsMichał Górny2018-07-291-5/+15
| | | | | | | Change the recommended key size recommendation for RSA from 4096 bits to 2048 bits. Use of larger keys is unjustified due to negligible gain in security, and recommending RSA-4096 unnecessarily resulted in developers replacing their RSA-2048 keys for no good reason.
* glep-0063: Explain minimal & recommended sectionsMichał Górny2018-07-291-0/+8
|
* glep-0063: Split out the signing subkey into a separate pointMichał Górny2018-07-291-4/+7
| | | | | | | | | Reword the specification to express the requirement for separate signing subkey more verbosely. Replace the ambiguous term 'dedicated' with clear explanation that it needs to be different from the primary key and not used for other purposes. Suggested-by: Kristian Fiskerstrand <k_f@gentoo.org>
* glep-0063: Root key → primary keyMichał Górny2018-07-291-4/+4
| | | | | Replace the custom term 'root key' with much more common 'primary key'. This is also the term used in GnuPG output.
* glep-0063: 'Gentoo subkey' → 'Signing subkey'Michał Górny2018-07-291-1/+1
| | | | | | | | Replace the 'Gentoo subkey' term that might wrongly suggest that the developers are expected to create an additional, dedicated subkey for Gentoo. Suggested-by: Kristian Fiskerstrand <k_f@gentoo.org>
* glep-0063: RSAv4 -> OpenPGP v4 key formatMichał Górny2018-07-291-2/+2
| | | | | | | | Replace the 'RSAv4' with 'OpenPGP v4 key format'. The RSA algorithm does not really have versions, and the author most likely meant the v4 of OpenPGP key format as outlined in RFC 4880, section 12.1. This was figured out and explained to me by Kristian Fiskerstrand.
* glep-0063: Use 'OpenPGP' as appropriateMichał Górny2018-07-291-13/+15
| | | | | | Replace many of the incorrect uses of GPG/GnuPG [key] with OpenPGP. G[nu]PG has been left where the text clearly refers to the specific implementation of OpenPGP rather than the standard itself.
* glep-0063: Document copyright owners.Robin H. Johnson2017-11-041-0/+1
| | | | | | | As with my other GLEPs (57-61), document the copyright owners, for future relicensing. Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* Update all GLEPs for the new header formatMichał Górny2017-10-091-6/+10
|
* Rename all GLEPs to .rstMichał Górny2017-10-091-0/+197