Re: Endorsing NoisyCoil's key 50CFC9D5E5BDE1CBCA57FD7B6DF008E70F28CBF7

Hello Matthias, hello NoisyCoil,

Thanks NoisyCoil for you contributions to debian so far \O/, and thank
you Matthias for willing to endorse NoisyCoil's key.
However, I am afraid that, IMO, interacting with someone for two months
is not enough for endorsing their key. Calling an interaction long-term
would mean something like 6 months, at least.

The key endorsements are meant to show a history of the link between a
key and their owner through the contributions. So we expect some more
than a couple of months, sorry. Also, we should probably better document
this, but giving links to some signed contributions also helps to
strength a key endorsement.

And since we are here, for applying to DM it is required to have one key
signature or two strong key endorsements. Do you have any plans on that?

Best regards,

El 18/09/24 a las 18:52, Matthias Geiger (via nm.debian.org) escribió:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> For nm.debian.org, at 2024-09-18:
> For the past two months, I have worked with NoisyCoil on tiny-dfr, dysk and the rust packages
> needed for those tools.
> 
> For this past work, NoisyCoil sent mails using the email address [email protected]
> which is the one they're using on nm.debian.org, and they signed their work and
> email using a GPG key with fingerprint 50CF C9D5 E5BD E1CB CA57  FD7B 6DF0 08E7 0F28 CBF7.
> 
> I've made sure that they are able to decrypt encrypted messages sent to this key
> and that they're able to sign messages with the same key.
> 
> Due to the long-term interactions we had, I'm convinced that NoisyCoil as they
> present themselves on nm.debian.org is the rightful owner of both email
> [email protected] and GPG key 50CF C9D5 E5BD E1CB CA57  FD7B 6DF0 08E7 0F28 CBF7
> -----BEGIN PGP SIGNATURE-----
> 
> iHUEARYIAB0WIQQUWTv/Sl6/b+DpcW7svtu2B7myvgUCZushYgAKCRDsvtu2B7my
> voOwAQD+AR6F19QiI4VLURFHWpHDFBs724ALAJyXEiLNjlE6jAD+IvTVIDxL5ofI
> EDjbFfE+eH9m/tHyLOkCmmriAJT8TQY=
> =DNJZ
> -----END PGP SIGNATURE-----
> 
> Matthias Geiger (via nm.debian.org)
> 
> For details and to comment, visit https://nm.debian.org/fprs/person/noisycoil/50CFC9D5E5BDE1CBCA57FD7B6DF008E70F28CBF7/endorsements/view/
> -- 
> https://nm.debian.org/fprs/person/noisycoil/50CFC9D5E5BDE1CBCA57FD7B6DF008E70F28CBF7/endorsements/view/
>

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQR+lHTq7mkJOyB6t2Un3j1FEEiG7wUCZvWdCAAKCRAn3j1FEEiG
75XOAP4yQCC7Rd2Tyq0+b06iAcDS81oIvx/e65LoCVVpzj5b5wD/fQkqbvNNlc+7
DsGI4I9ldQyp6wxOjvaMujsGikUDwws=
=i5rj
-----END PGP SIGNATURE-----