IRILL - Research and Innovation on Free Software Come learn and teach about OpenPGP, how it's used within debian, and how you can improve your own (and the distro's) digital integrity.
Debian, like any reasonable modern operating system or development community, relies heavily on authenticated, unforgeable messages to ensure that our infrastructure can't be trivially compromised. In particular, each Debian Developer and Debian Maintainer needs to maintain their own OpenPGP key. Most of us use GnuPG for this purpose. But OpenPGP (and cryptographic certification and signatures generally) can be a finicky topic, and sometimes it can be frustrating or worrisome if you're not sure if what you're doing potentially puts your own digital identity or the project's infrastructure at risk. This workshop and skillshare will help people feel more comfortable and confident using and maintaining their OpenPGP keys securely, ask questions (and get feedback), and suggest useful patterns and workflows to others.