git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Don't use PGP/GPG signatures in mail that contains patches

From
EWEric Wong <normalperson@yhbt.net>
Date
Jan 19, 2016, 21:05 UTC
Message-ID
<20160119210547.GA2822@dcvr.yhbt.net>
In-Reply-To
<569E2398.2050206@gmail.com>
Andrey Utkin <andrey.od.utkin@gmail.com> wrote:
Show 8 quoted lines
> But still, if we encourage signing maillist correspondence, we would
> avoid impersonation attacks. Imagine that somebody sends stupid
> submissions from your name, maintainers shout at you, and your
> reputataion is... changed. Of course, you will be able to sort things
> out after you read the replies and reply that it's not you. But, given
> to openness of maillists, the attacker is able to follow your replies
> and insert his ones. Or to reply to your valid submissions that they are
> not from you.

Is impersonation an actual problem on vger.kernel.org lists? Reply-to-all conventions on these lists do a great deal to discourage them.

Previous: Andrey Utkin
Message 4 of 4 in “Don't use PGP/GPG signatures in mail that contains patches”
  1. Andrey UtkinJan 18, 2016
  2. Jeff KingJan 18, 2016
  3. Andrey UtkinJan 19, 2016
  4. Eric WongJan 19, 2016

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.