Key consistency checks

This requirement has been approved by Jonathan McDowell <noodles@earth.li> 6 years, 6 months ago.

This process has been closed by gwolf on 2019-07-25: no further modifications are possible.

Every Debian member needs a GPG key of sufficient strength. In addition, all keys should be certified so we can link them to a real-world identity.

The normal requirements are:

the key should be type RSA and version 4 or greater
the key should have the sign, certify and encrypt capabilities (subkeys are encouraged)
the primary cryptographic material should be at least 4096 bits
the UIDs used by an applicant to work in the project should be signed by at least two existing Debian members (1 for DM applications)
as an alternative to the previous requirement, the key can be endorsed (see link at the bottom of the page) by multiple Debian Members (the number of required endorsements depends on the endorsement's age and nature)
pseudonyms or anonymity are acceptable in certain circumstances

If the key does not meet these requirements, and you would struggle to create one which does, contact Front Desk.

Keys are first searched in hkps://keyring.debian.org. If no key is found, then the key will be imported from hkps://keyserver.ubuntu.com/. Please ensure that you have sent your key to Ubuntu's key server. Sending public keys to keyring.debian.org will only work if your key is already in Debian's keyring and will only be taken into account after the Keyring Maintainers updated it. For Debian Maintainers and Developers, please remember to send your key to both servers.

This check will be approved manually by Front Desk as the application progresses.

Key check results

OpenPGP fingerprint	7A1F B527 9B88 D54B D4F4 2300 F536 AA70 111D 5716
Main key	ok (last updated: 2025-03-04 17:46 UTC)
UID Judit Foglszinger	ok, 10 non-DD sigs, first 10 of 49 DD sigs: F3E4122F1D8C261A: Michael Schutte <michi@uiae.at> 8E889544D985000D: Bastian Venthur <mail@venthur.de> A73E0055558FB8DD: Jan Dittberner <jan@dittberner.info> 5D328D082AAAB140: Hideki Yamane <henrich@debian.org> 57930DAB0B86B067: Joost E. van Baal (Nederland, 1970) 2FF9CD59612616B5: Axel Beckert <abe@deuxchevaux.org> 76B534B2E99007E0: Thorsten Glaser (no PGP/MIME please, use Inline OpenPGP instead) <tg@mirbsd.org> 091AB856069AAA1C: Holger Levsen <holger@layer-acht.org> 578A0494D1C646D1: Andreas Tille <tille@debian.org> B82A217AFDFE09F2: David Prévot <david@tilapin.org>
UID Judit Foglszinger <fgrfgr, freenet.de>	ok, 10 non-DD sigs, first 10 of 45 DD sigs: F3E4122F1D8C261A: Michael Schutte <michi@uiae.at> 8E889544D985000D: Bastian Venthur <mail@venthur.de> A73E0055558FB8DD: Jan Dittberner <jan@dittberner.info> 5D328D082AAAB140: Hideki Yamane <henrich@debian.org> 57930DAB0B86B067: Joost E. van Baal (Nederland, 1970) 2FF9CD59612616B5: Axel Beckert <abe@deuxchevaux.org> 76B534B2E99007E0: Thorsten Glaser (no PGP/MIME please, use Inline OpenPGP instead) <tg@mirbsd.org> 091AB856069AAA1C: Holger Levsen <holger@layer-acht.org> 578A0494D1C646D1: Andreas Tille <tille@debian.org> B82A217AFDFE09F2: David Prévot <david@tilapin.org>
UID Judit Foglszinger <urbec, debian.org>	ok, 4 non-DD sigs, first 10 of 20 DD sigs: 39278DA8109E6244: Guilhem Moulin B01D1A72AC8DC9A1: Jonathan Carter <jcc@debian.org> AA230FC45F8C27B1: Martina Ferrari <tina@tina.pm> 4B043FCDB9444540: Mattia Rizzolo <mattia@mapreri.org> 789D6F057FD863FE: Salvatore Bonaccorso <salvatore.bonaccorso@gmail.com> 091AB856069AAA1C: Holger Levsen <holger@layer-acht.org> 4C5A6BAB12D2A7AE: Christoph Berg <cb@df7cb.de> DEE8043EE17EBB30: Rhonda 793CF67E8F0D11DA: Étienne Mollier <emollier@emlwks999.eu> 348A778D6885EF8F: Jose M Calhariz (Técnico) <jose.calhariz@tecnico.ulisboa.pt>
UID Judit Foglszinger <urbec, riseup.net>	ok, 3 non-DD sigs, first 10 of 14 DD sigs: 4C5A6BAB12D2A7AE: Christoph Berg <cb@df7cb.de> DEE8043EE17EBB30: Rhonda 793CF67E8F0D11DA: Étienne Mollier <emollier@emlwks999.eu> 348A778D6885EF8F: Jose M Calhariz (Técnico) <jose.calhariz@tecnico.ulisboa.pt> 196418AAEB74C8A1: Jonathan Wiltshire <jmw@debian.org> B3F5945285219E1F: Mohammed Bilal <mdbilal@disroot.org> 6F5982D88300A641: Jessica Clarke <jrtc27@jrtc27.com> 9026108FB942BEA4: Jonathan McDowell <noodles@earth.li> EEED479E6CECF707: Ananthu C V <weepingclown@debian.org> A802884F60A55F81: Carles Pina i Estany <carles@pina.cat>

Active key endorsements

Endorsed by

Date

Statement

Actions

emorrp1

2024-03-31
(11 months, 2 weeks ago)

For nm.debian.org, at 2024-03-31:
Judit Foglszinger was my AM and would obviously like more trust in their PGP key than
merely meeting up in person, showing some government documents with their so-called "real"
name, sharing their fingerprint and later attaching encrypted keysignatures to multiple
uids can provide, hence this endorsement as requested over IRC.

For this past work, Judit Foglszinger sent mails using the email address urbec@riseup.net
which is ***NOT*** the one they're using on nm.debian.org, and they signed their work and
email using a PGP key with fingerprint 7A1F B527 9B88 D54B D4F4  2300 F536 AA70 111D 5716.

I've made sure that as of 2022-09-25 they were able to decrypt messages sent to
**urbec@debian.org** encrypted to this key and that they're able to sign messages with the
same key, only ever sent from urbec@riseup.net, most recently on 2023-12-08.

Due to the long-term interactions we had, I'm convinced that Judit Foglszinger as they
present themselves on nm.debian.org is the rightful owner of emails urbec@debian.org,
urbec@riseup.net and PGP key 7A1F B527 9B88 D54B D4F4  2300 F536 AA70 111D 5716.

Signed with key 2C42 9F5D D6B7 F023 BD30 0993 453F 8D99 9F11 3609

View raw

Log

Date	Author	Action	Content	Public
2018-08-22 20:25	noodles	req_approve	Requirement approved	yes