Re: Lack of detached signatures
- From
Sverre Rabbelier <srabbelier@gmail.com>
- Date
- Sep 29, 2011, 14:40 UTC
- Message-ID
- <CAGdFq_h6shMp+d4f1bG=if6L11M_5ixN5JF7KgCrZJ44QBt0QQ@mail.gmail.com>
- In-Reply-To
- <20110929131845.GQ19250@thunk.org>
Heya,
On Thu, Sep 29, 2011 at 15:18, Ted Ts'o <tytso@mit.edu> wrote:
Show 13 quoted lines
> Handset manufacturers such as Samsung, HTC, Motorola, etc., there will > be many of those reprsenatives at LinuxCon Europe and CELF (Consumer > Electronics Linux Forum) Europe conferences, which will be colocated > with the Kernel Summit in Prague. > > If you are thinking of random developers located in far-flung places > of the world who don't have any contact with other Linux developers, > this is a previously unsolved problem. There are links into the > developing Kernel GPG tree that are signed by the GPG web trust used > by Debian, OpenSuSE, and (soon) Fedora. Given that people generally > have to trust one or more of those web of trusts, that's the best we > can do, at least as far as I know. If you can suggest something > better, please let me know!
This all sounds very interesting. Where is this discussion on a new web of trust taking place? The kernel mailing list? Do you have a message-id / gmane.org link for me to read more about this perhaps?
-- Cheers, Sverre Rabbelier