Kunal Mehta

OK, should be ready for a re-review now.

> to replace arrow's humanize, we can use babel's format_timedelta. babel is currently only a dev dependency, so it needs to be upgraded to prod (it's already prod on the...

Upgrading six to 1.16.0 should be good enough, and that's what we've already diff reviewed in https://github.com/freedomofpress/securedrop-builder/wiki/six-1.15.0-to-1.16.0 Reading https://github.com/benjaminp/six/blob/main/CHANGES, the fixes in 1.17.0 don't affect us.

I went a little crazy and tried to create 4 interdependent PRs across builder and client; I've made it just 2, one in builder that needs to go first, and...

Broadly I understand where you're coming from, but my general feeling to most of the things you've pointed out is that yes, there's plenty we could do and ideally would...

woot \o/ Just quickly replying to your other thoughts: > The Debian qube for SD admin has secrets (including `app-journalist.auth_private` even though it won't be used for admin stuff), and...

> So maybe one update is to make the `qubesconfig` ansible playbook at the apt.freedom.press repo I think we can rely on the template to configure the apt.freedom.press repository on...

Hmm, I also hadn't thought of the bootstrapping problem. We could also have a mode in SDW that only sets up the admin VM and skips the others until you...

> NameError: name 'platform_system' is not defined You'll need pip >= 8.1.2 for that to work.

We already render a plain-text ASCII QR code via `manage.py`, I wonder if we could just render that with a monospace font in HTML.