Re: [lm-sensors] [GIT PULL] hwmon fixes for 3.1

[Guenter Roeck <guenter.roeck@ericsson.com>]

On Wed, Sep 07, 2011 at 03:28:16AM -0400, Jean Delvare wrote:
[ ... ]
> 
> When you created this account on kernel.org, you used a PGP key to
> identify yourself, didn't you? If you sign your message with that key,
> then a few people (basically the kernel.org maintainers) will be able
> to confirm that you are the same person who had a trusted kernel.org
> account. I don't know if Linus has the list though.
> 
> What surprises me a little is that I don't have your public key in my
> keyring, and I can't seem to be able to find it on public servers
> either. You really should push your key to public key servers,
> otherwise a signed message from you has no value in general.
> 
Yeah, one may notice that I am not a security guy and don't pay sufficient
attention to such matters.

> Obviously it's a little late now though. The whole idea of trust and
> signatures is to keep the level of trust after odd events such as the
> kernel.org break-in. For this, keys must have been exchanged, tested
> and trusted long before said event happens.
> 
Agreed.

Guenter