Tails/wiki/src/doc/about/openpgp_keys/signing_key_revocation.*.po

Exit Zen

1
	English type: Plain text [[!meta title="Revocation of the Tails signing key"]]
	Arabic 0/540 · 54 RTL LTR Needs editing
2
	English type: Plain text This document proposes a mechanism for the distribution and activation of the revocation certificate of the Tails signing key.
	Arabic 0/1260 · 126 RTL LTR Needs editing
3
	English type: Title = Goals
	Arabic 0/100 · 5 RTL LTR Needs editing
4
	English type: Plain text Covered by the current proposal:
	Arabic 0/320 · 32 RTL LTR Needs editing
5
	English type: Plain text - Prevent any single individual from revoking our signing key.
	Arabic 0/620 · 62 RTL LTR Needs editing
6
	English type: Bullet: '- ' Allow a coalition of people from the Board to revoke our signing key in case most of the people from the Board become unavailable.
	Arabic 0/1300 · 130 RTL LTR Needs editing
7
	English type: Bullet: '- ' Allow a coalition of people, not necessarily from the Board, to revoke our signing key in case everybody or almost everybody from the Board becomes unavailable.
	Arabic 0/1600 · 160 RTL LTR Needs editing
8
	English type: Bullet: '- ' Make it hard for a coalition of people not from the Board to revoke our signing key unless everybody or almost everybody from the Board becomes unavailable.
	Arabic 0/1560 · 156 RTL LTR Needs editing
9
	English type: Bullet: '- ' People not from the Board shouldn't know how the shares are spread and who has them.
	Arabic 0/840 · 84 RTL LTR Needs editing
10
	English type: Bullet: '- ' People in possession of a share of the revocation certificate of the signing key should have instructions on how to use it if needed.
	Arabic 0/1330 · 133 RTL LTR Needs editing
11
	English type: Title = Groups
	Arabic 0/100 · 6 RTL LTR Needs editing
12
	English type: Plain text We define four complementary groups of trusted people:
	Arabic 0/540 · 54 RTL LTR Needs editing
13
	English type: Bullet: ' - ' Group A: people from the Board themselves
	Arabic 0/410 · 41 RTL LTR Needs editing
14
	English type: Bullet: ' - ' Group B
	Arabic 0/100 · 7 RTL LTR Needs editing
15
	English type: Bullet: ' - ' Group C
	Arabic 0/100 · 7 RTL LTR Needs editing
16
	English type: Bullet: ' - ' Group D
	Arabic 0/100 · 7 RTL LTR Needs editing
17
	English type: Plain text All these people should have an OpenPGP key and understand what a revocation certificate is.
	Arabic 0/920 · 92 RTL LTR Needs editing
18
	English type: Title = Cryptographic shares
	Arabic 0/200 · 20 RTL LTR Needs editing
19
	English type: Plain text We generate a revocation certificate of the signing key and split it into a number of cryptographic shares, using for example Shamir's secret sharing scheme implemented by `gfshare`.
	Arabic 0/1820 · 182 RTL LTR Needs editing
20
	English type: Plain text The following combinations of people could get together and reassemble their shares to reconstruct a complete revocation certificate:
	Arabic 0/1330 · 133 RTL LTR Needs editing