Web of Trust work [Was: kernel.org tooling update]

Uwe Kleine-König
2026-01-23T09:20:03Z

[-- Attachment #1.1: Type: text/plain, Size: 732 bytes --]

Hello Konstantin,

On 12/10/25 05:48, Konstantin Ryabitsev wrote:
> ## Web of Trust work
>
> There is an ongoing work to replace our home-grown web of trust solution (that
> does work but has important bottlenecks and scaling limitations) with
> something both more distributed and easier to maintain. We're working with
> OpenSSF to design the framework and I hope to present it to the community in
> the next few months.

the current home-grown solution is https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/, right?

I wonder what the bottlenecks and scaling limitations are that you mention.

Is there some info available already now about the path you (and OpenSSF) intend to propose?

Best regards
Uwe

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 488 bytes --]