Basically, I'll sign the key of someone I know if they give me a copy
of their key's fingerprint, in person. If pressed I'll settle for
voice verification.
I don't know anyone well enough that I would sign their key but whom
I don't meet from time to time. If that changes I'll probably add another
exception to my policy.
(Aren't you just incredibly glad I took the time to write this down?)