Feature #8730

Publish a transition statement for our signing key

Added by intrigeri 2015-01-19 14:24:40 . Updated 2015-03-22 12:09:14 .

Status:
Resolved
Priority:
Elevated
Assignee:
Category:
Target version:
Tails_1.3.1
Start date:
2015-01-19
Due date:
% Done:

80%

Feature Branch:
news/8730-key-signing-transition-statement
Type of work:
End-user documentation
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

E.g. as a blog post, published at the same time as 1.3.1.

Subtasks

History

#1 Updated by intrigeri 2015-01-19 14:41:32

  • Private changed from Yes to No

#2 Updated by intrigeri 2015-01-19 16:16:00

#3 Updated by intrigeri 2015-03-03 14:07:59

  • related to Feature #8769: Document how to migrate from trusting the old key to trusting the new key added

#4 Updated by sajolida 2015-03-12 12:04:00

  • related to deleted (Feature #8769: Document how to migrate from trusting the old key to trusting the new key)

#5 Updated by sajolida 2015-03-12 12:04:03

  • has duplicate Feature #8769: Document how to migrate from trusting the old key to trusting the new key added

#6 Updated by sajolida 2015-03-12 12:06:46

  • Assignee changed from intrigeri to sajolida

I took the liberty of taking this one from you for a couple of days. I want this transition statement to be publish before 1.3.1 (ideally as early as we can). To give people some time to adjust. Now that we have publish the two late reports we should (hopefully) have some more quiet time on the blog. I’ll start working on a draft right now.

#7 Updated by intrigeri 2015-03-12 13:00:47

> I took the liberty of taking this one from you for a couple of days.

I certainly don’t mind :)

#8 Updated by sajolida 2015-03-12 15:32:38

  • Assignee changed from sajolida to intrigeri
  • QA Check set to Ready for QA
  • Feature Branch set to news/8730-key-signing-transition-statement

I pushed a first draft, see 0e169fc.

I’m asking you for a first review. You don’t have to go into serious details but I want to check the overall strategy with you first:

  • Do you think that’s what needed to be written?
  • I didn’t do the usual clearsign of the text as I don’t really get the point since the new key is signed by the old key.
  • I might have rewritten part of your work in doc/about/openpgp_keys.mdwn but once we agree on that call I’ll merge the relevant parts in feature/8740-new-signing-key-phase-2

#9 Updated by intrigeri 2015-03-14 09:40:00

  • Status changed from Confirmed to In Progress

#10 Updated by BitingBird 2015-03-14 12:12:11

  • % Done changed from 0 to 20

#11 Updated by intrigeri 2015-03-16 10:13:55

  • Assignee changed from intrigeri to sajolida
  • % Done changed from 20 to 30
  • QA Check deleted (Ready for QA)
  • Type of work changed from Website to End-user documentation

> Do you think that’s what needed to be written?

Yes! I’ve pushed a couple commits on top. And then:

  • Any reason why the link to tails-signing-new.key is hardcoded, instead of using the tails_website ikiwiki shortcut?
  • I’m not sure it’s worth documenting that the new signing key is certified by my old, now expired key: it’s not in sid’s debian-keyring anymore. If it helps, I can certify it again with my new key. OTOH, my new key isn’t in Wheezy’s nor Jessie’s debian-keyring package. I’ll let you decide.

#12 Updated by intrigeri 2015-03-16 10:39:41

On second thought, I’m not convinced it was a good idea to mark Feature #8769 as a duplicate of this one: there’s one piece of work (Feature #8769#note-6) that we cannot cover here, since it needs to be merged into master at 1.3.1 release time, contrary to the blog post this ticket is about. Shall I unmerge these two tickets and clarify on Feature #8769 what it covers exactly, that Feature #8730 doesn’t?

#13 Updated by sajolida 2015-03-16 14:52:45

  • Status changed from In Progress to Resolved
  • % Done changed from 30 to 100

Applied in changeset commit:094a53b74004d3448d7bc3a8e96fab7d602895bd.

#14 Updated by sajolida 2015-03-16 14:56:10

> * Any reason why the link to tails-signing-new.key is hardcoded, instead of using the tails_website ikiwiki shortcut?

I did the same as we do for the usual signing key from download.html.
The reason behind that is, I think, to force people to fetch the key
from the website when using the offline version so they can get a
correct MIME type from the server.

> * I’m not sure it’s worth documenting that the new signing key is certified by my old, now expired key: it’s not in sid’s debian-keyring anymore. If it helps, I can certify it again with my new key. OTOH, my new key isn’t in Wheezy’s nor Jessie’s debian-keyring package. I’ll let you decide.

I didn’t realize it was your old key. So I removed that.

#15 Updated by sajolida 2015-03-16 14:56:18

  • is duplicate of deleted (Feature #8769: Document how to migrate from trusting the old key to trusting the new key)

#16 Updated by sajolida 2015-03-16 15:00:17

  • Assignee deleted (sajolida)
  • % Done changed from 100 to 30

#17 Updated by intrigeri 2015-03-16 15:55:09

>> * Any reason why the link to tails-signing-new.key is hardcoded, instead of using the tails_website ikiwiki shortcut?

> I did the same as we do for the usual signing key from download.html. The reason behind that is, I think, to force people to fetch the key from the website when using the offline version so they can get a correct MIME type from the server.

FYI, that’s exactly what the tails_website ikiwiki shortcut does. See e.g. doc/about/openpgp_keys where we use it for the very same purpose. Anyway, no big deal.

#18 Updated by intrigeri 2015-03-16 16:00:47

  • % Done changed from 30 to 100

#19 Updated by sajolida 2015-03-16 17:06:54

  • Status changed from Resolved to In Progress
  • Assignee set to intrigeri
  • % Done changed from 100 to 80
  • QA Check set to Info Needed

I added the [[!tag announce]] flag but it was not sent to amnesia-news nor appear in the moderation queue. Shall I wait more? Send it by hand? Write to rootboum.org?

#20 Updated by intrigeri 2015-03-16 17:43:42

> I added the [[!tag announce]] flag but it was not sent to amnesia-news nor appear in > the moderation queue. Shall I wait more? Send it by hand? Write to rootboum.org?

I think the rss2email cronjob runs every N hours only, and has been pretty reliable so far, so: first, wait a bit more :)

#21 Updated by intrigeri 2015-03-16 17:44:19

  • Assignee changed from intrigeri to sajolida
  • QA Check deleted (Info Needed)

#22 Updated by sajolida 2015-03-17 13:02:57

  • Status changed from In Progress to Resolved
  • Assignee deleted (sajolida)

https://mailman.boum.org/pipermail/amnesia-news/2015-March/000089.html

#23 Updated by BitingBird 2015-03-22 12:09:14

  • Target version changed from Tails_1.3.2 to Tails_1.3.1