[gentoo-dev] Re: [PATCH v3 00/12] GLEP 63 update

[Robin H. Johnson]

On Thu, Jul 05, 2018 at 10:53:51PM +0200, Michał Górny wrote:
> Here's third version of the patches.  I've incorporated the feedback
> so far and reordered the patches (again) to restore their
> degree-of-compatibility order.  The full text is included below.
...
> v2
>   The distinct minimal and recommended expirations have been replaced
>   by a single requirement. The rules have been simplified to use
>   the same time of 2 years for both the primary key and subkeys.
-the same time of 2 years ...
+the same 2 year maximum renewal time ...

>   An additional rule requesting key renewal 2 weeks before expiration
>   has been added. This is in order to give services and other developers time
>   to refresh the key.
Do we want to state that infra will start contact devs before this, or
keep that as an implementation detail?

> 4. Expiration date on key and all subkeys set to at most 2 years
-at most 2 years.
+at most 2 years from generation or refresh of expiry.

> Recommendations
> ---------------
...
> 3. Key expiration renewed annually
Can we please suggest it's updated to a fixed day of the year? 

> Gentoo LDAP
> ===========
...
> All Gentoo developers must list the complete fingerprint for their primary
> keys in the "``gpgfingerprint``" LDAP field. It must be exactly 40 hex digits,
> uppercase, with optional spaces every 8 hex digits. Regular expression for
> validation::
Can we please drop the spaces in the field in LDAP. I don't care if we
display it with spaces, but dropping them in LDAP would be helpful.

> Copyright
> =========
> Copyright (c) 2013 by Robin Hugh Johnson, Andreas K. Hüttel, Marissa Fischer.
Please update the copyright date:
2013,2018
and add yourself as a copyright owner for the scale of these changes.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robbat2@g.o
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136