Re: Tor exit nodes

[Gunnar Wolf <gwolf@debian.org>]

PICCA Frederic-Emmanuel dijo [Mon, Oct 09, 2017 at 10:01:57AM +0000]:
> What about providing a gnupg key for all DD, in order to store their private keys.
> 
> PS: I am not interested myself, since I own a nitrokey, but it would be great if
> DD could setup something more secure like this easily.

Our threat model includes (emmm... Actually, _does its best to_
include, as there are some attacks possible) *one* DD going rogue —
That is, we won't accept a request for a key transition with only one
signature (because a single DD might be trying to steal somebody's
identity).

We cannot trust all of our private keys to be in a place *any* of us
can get to. Your identity is yours and yours alone.

What you could do is to split your private key in several secrets,
just as outlined by Chris Lamb in his latest post:

    https://chris-lamb.co.uk/posts/python-gfshare-secret-sharing-in-python

You could split your key in n pieces, and set a threshold to require
only m of them to recover it. Send it to friends _you_ trust.

We cannot assume to ultimately trust each other with our identity. We
are close to a thousand people.

Attachment: signature.asc
Description: PGP signature