Basically, I'll sign the key of someone I know if they give me a copy of their key's fingerprint, in person. If pressed I'll settle for voice verification.

I don't know anyone well enough that I would sign their key but whom I don't meet from time to time. If that changes I'll probably add another exception to my policy.

(Aren't you just incredibly glad I took the time to write this down?)