1 |
On Sat, 13 Jul 2019 23:38:51 +0000 Robin H. Johnson wrote: |
2 |
> Hi, |
3 |
> |
4 |
> I'm trying to put together a survey about the Nitrokey units that the |
5 |
> Foundation arranged for devs. |
6 |
> |
7 |
> The rough goals: |
8 |
> - measure shipping results [=> quantitative, at least one dev had their shipment returned] |
9 |
> - measure usage [=> quantitative, was this a waste?] |
10 |
> - measure satisfaction with nitrokey units [=> qualitative] |
11 |
> |
12 |
> I'm planning on using Google Forms for this, because I'm familiar with |
13 |
> that as a survey platform. |
14 |
> |
15 |
> I'm not going to spin up an entire survey system just keep it entirely |
16 |
> libre. I do plan on publishing the results of the survey, with some |
17 |
> parts made anonymous/redacted. |
18 |
> |
19 |
> The form will NOT require sign-in, but there will be a field for |
20 |
> entering your developer name. |
21 |
> |
22 |
> I would appreciate both public & private input, both about this as a |
23 |
> survey, and meta-input about future surveys to measure success of |
24 |
> particular programs. |
25 |
> |
26 |
> Draft questions: |
27 |
> ---------------- |
28 |
> |
29 |
> Setup: |
30 |
> - Dev Username [textfield] |
31 |
> |
32 |
> Shipping: |
33 |
> - Did you order a nitrokey unit? boolean |
34 |
> - When did you placed the order (optional) Y/M/D |
35 |
> - When did you received the order (optional) Y/M/D |
36 |
> - How many nitrokey units did you actually receive? [integer] |
37 |
> - Did you have to pay any additional charges to receive the unit? |
38 |
> - If so, how much did you pay? [numeric] |
39 |
> COMMENT: I want to be able to adjust this question to both per-country |
40 |
> cost-of-living and socioeconomic level of different developers within |
41 |
> a country. See the demographics at the end. |
42 |
> - If so, what were the nature of the charges (e.g. customs) [freetext] |
43 |
> - Additional: If you did not receive the order, or got more than one, |
44 |
> can you summarize what happened? [freetext] Please do not |
45 |
> self-identify in the text. |
46 |
> |
47 |
> Usage: |
48 |
> - Note: per-developer commit count will be extracted from Git |
49 |
|
50 |
This count will give only a lower esfimate of what number of |
51 |
signature are made for the Gentoo git. You also need to commit |
52 |
number of git pushes, since we require them to be signed as well. |
53 |
|
54 |
Another option is automatic rebase: this is how most commits to the |
55 |
tree are done: git pull; do some job; repoman commit; git pull && |
56 |
git push — and most likely rebase will occur during git pull && git |
57 |
push, so the number of signature with be doubled. Sometimes it will |
58 |
be tripled, since I have had failures with git pulll && git push |
59 |
when someone made commits in-between. |
60 |
|
61 |
> - What percentage of your commits use the on-device key? (0..100% in 25% increments) |
62 |
> - Did you use the units for non-commit signing or encryption? [boolean] |
63 |
> - If so, how often? [many times a day, daily, weekly, monthly] |
64 |
|
65 |
I think this list should be extended: now it assumes that keys are |
66 |
used for either Gentoo git commits or non-commit signing or |
67 |
encryption. But keys mays also be used or git signing in other |
68 |
projects and for gpg-based authentification (auth subkey). |
69 |
|
70 |
Also nirokey has other usage than gpg signing: it can be used as |
71 |
TRNG, for pam auth, OTP storage, encrypted password safe and so on. |
72 |
Such usage should be included to the survey as well and add the |
73 |
"other" field for other cases. |
74 |
|
75 |
Best regards, |
76 |
Andrew Savchenko |