Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1026165

Bug#892058: debian-keyring: please automatically send reminder emails to people whose keys will expire soon

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

David Prévot dijo [Wed, Sep 23, 2020 at 10:49:33AM -0400]:
> > And we would have everything in place to notify people whose key is
> > to expire soon.
> 
> Wonderful, thank you for working into making (part of) our lives easier!

:-]

I will add this, but not to this script (thinking during
breakfast... The script I modified is part of our test suite, and it'd
be wrong to mark soon-to-expire keys as failing). But I think I will
modify in this same way the mail_expired script - making it not
consume from the no-expired test, but asking directly from gpg.

I also just (!) took notice of this bug report and its history;
although we informally discussed this a long time ago, I'd like to
give _my_ answer to Jonathan's questions¹. Note that they are _my_
take on that, just as ⅓ of the relevant team (where Jonathan is
another ⅓).

¹ https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892058#10

- What email to notify from? I think it can be keyring-maint@d.o. Why
  not? It's not going to be so massive, and if we get bounces... Well,
  they will not be hundreds of them.

- Which mail to notify? I think just the @debian.org address should
  suffice. Yes, we know of some DDs that disable this address, but I
  don't think they are significative enough for us to even notice.

- How often? I often do a mail every time I push out a keyring (which
  is, approximately, one out of three months). I think we could do
  this run on a monthly basis, notifying people that are to expire in
  two or three months time.

- Why is it keyring-maint's responsibility? It is not, but it is a
  service we can perform, much like any other person can. It just
  happens that we have all of the data in our hands.

- How long to care for long expired keys? I often mail everybody with
  an expired key, but it'd be quite easy to have some different mails
  -- Could be along the lines of "Key about to expire, please act now"
  (-2 to 0 months), "Key recently expired" (0 to 3 months), "Do note
  your key has expired" (3 to 12 months), "Key long expired" (12 to 24
  months), and... "Radio silence, please call in MIA".

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#892058: debian-keyring: please automatically send reminder emails to people whose keys will expire soon Jonas Smedegaard <dr@jones.dk> - 2020-09-23 08:50 +0200
  Bug#892058: debian-keyring: please automatically send reminder emails to people whose keys will expire soon Gunnar Wolf <gwolf@debian.org> - 2020-09-23 15:40 +0200
    Bug#892058: debian-keyring: please automatically send reminder emails to people whose keys will expire soon David Prévot <taffit@debian.org> - 2020-09-23 17:00 +0200
      Bug#892058: debian-keyring: please automatically send reminder emails to people whose keys will expire soon Gunnar Wolf <gwolf@debian.org> - 2020-09-23 17:40 +0200

csiph-web