From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S935634Ab1JFATi (ORCPT ); Wed, 5 Oct 2011 20:19:38 -0400 Received: from exprod7og119.obsmtp.com ([64.18.2.16]:34241 "EHLO exprod7og119.obsmtp.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S935580Ab1JFATh (ORCPT ); Wed, 5 Oct 2011 20:19:37 -0400 Message-ID: <4E8CF3C9.3080908@genband.com> Date: Wed, 05 Oct 2011 18:18:17 -0600 From: Chris Friesen User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.22) Gecko/20110906 Fedora/3.1.14-1.fc14 Lightning/1.0b3pre Thunderbird/3.1.14 MIME-Version: 1.0 To: Thomas Gleixner CC: Adrian Bunk , "Ted Ts'o" , "Frank Ch. Eigler" , Valdis.Kletnieks@vt.edu, "H. Peter Anvin" , "Rafael J. Wysocki" , Linux Kernel Mailing List , Greg KH Subject: Re: kernel.org status: establishing a PGP web of trust References: <201110021354.57995.rjw@sisk.pl> <4E88A537.4010008@zytor.com> <20111003093239.GB25136@localhost.pp.htv.fi> <20111003180441.GD3072@localhost.pp.htv.fi> <34045.1317760188@turing-police.cc.vt.edu> <20111004223932.GA3460@localhost.pp.htv.fi> <20111004231730.GB17089@redhat.com> <20111005075438.GA29441@localhost.pp.htv.fi> <20111005170616.GD4297@thunk.org> <20111005192349.GA14406@localhost.pp.htv.fi> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 06 Oct 2011 00:18:19.0532 (UTC) FILETIME=[736A84C0:01CC83BD] X-TM-AS-Product-Ver: SMEX-8.0.0.4160-6.500.1024-18428.003 X-TM-AS-Result: No--9.195400-5.000000-31 X-TM-AS-User-Approved-Sender: No X-TM-AS-User-Blocked-Sender: No Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 10/05/2011 05:57 PM, Thomas Gleixner wrote: > On Wed, 5 Oct 2011, Adrian Bunk wrote: >> Or if I have to bother Linus to meet me and sign my key the next >> time he is here in Helsinki. > > And how would that change the fact that your personal trust value in > this community is exactly ZERO? > > As your idea of trust seems to be based on an ID card you better find > some other place with people who are stupid enough to believe that > technical measures can replace deep personal trust. Aren't you sort of conflating personal trust with a web-of-trust? A web-of-trust exists simply to associate a person with a key. It *is* a technical measure. If Linus is willing to assert that Adrian's key matches up with Adrian-as-individual, and you trust Linus, then you should accept Adrian's key as valid regardless of whether or not you personally trust him. Chris -- Chris Friesen Software Developer GENBAND chris.friesen@genband.com www.genband.com