Re: Tor exit nodes

[Lars Wirzenius <liw@liw.fi>]

I agree that it is pointless to just shower unineterested people with
smartcards. However, it's also clear that it'd be good for more DDs to
use them.

* It's not all _that_ hard to learn how to use them. There's material
  to learn that online that works. Thus, I agree with Santiago's
  suggestion Debian asks for interest first. Also, some of us already
  have the hardware, and don't want more (I have, I don't).

* I think having security and crypto training at every Debconf would
  be a good idea: how to use gpg, how to configure gpg well, how to
  secure one's laptop, etc.

* The Yubikey 4 seems to be the best hardware option. It's not free
  hardware, however. I'm OK with that for my own use, and I'd be OK
  for that for Debian's use. But before Debian spends money on that,
  we should have consensus that it's OK. I'm also OK for Debian to
  choose an option with free-er hardware, but have no personal
  experience with those.

* One Yubikey model 4 is $40 (plus postage) on Amazon.com. Times 1000
  DDs, that's a lot of money for Debian. Can we find someone to
  sponsor them? Maybe Yubico itself?

-- 
I want to build worthwhile things that might last. --joeyh

Attachment: signature.asc
Description: PGP signature