Gentoo Archives: gentoo-project

From: Brian Evans <grknight@g.o>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] pre-GLEP: Gentoo OpenPGP web of trust
Date: Fri, 01 Feb 2019 14:43:30
Message-Id: 2b8cb50f-7fd2-39c7-5f84-ea03c7806360@gentoo.org
In Reply to: Re: [gentoo-project] pre-GLEP: Gentoo OpenPGP web of trust by "Michał Górny"
1 On 2/1/2019 1:57 AM, Michał Górny wrote:
2 > On Thu, 2019-01-31 at 09:21 -0500, Brian Evans wrote:
3 >> On 1/31/2019 8:56 AM, Michał Górny wrote:
4 >>
5 >>>
6 >>> Signature requirements
7 >>> ----------------------
8 >>>
9 >>> As a final goal of this GLEP, each Gentoo developer will be required
10 >>> to have at least one signature from another Gentoo developer or from
11 >>> member of one of the partner communities present on their
12 >>> ``@gentoo.org`` UID.
13 >>
14 >> -1
15 >>
16 >> I won't be able to accomplish this as I do not travel and have no
17 >> opportunities to meet with others. Plus, it's just downright awkward.
18 >> I'm sure there are other devs in this same situation.
19 >>
20 >
21 > The most commonly proposed alternative is identity verification via
22 > video chat. Would that also be unachievable for you?
23 >
24 > It would be really nice to get some measure on how many people *really*
25 > can't do it, rather than how many will oppose for the sake of opposing.
26
27 This is likely to be difficult if not impossible to accomplish.
28
29
30 > It is funny how many of the people complaining today would actually
31 > quickly get the needed signature if this was required from the start.
32
33 It's also funny how a few individuals are suddenly pushing this obscure
34 GPG "Web of Trust" that so few others care about. GnuPG is quite crude
35 and difficult to use and understand.
36
37 If this requirement becomes mandatory, my time will end at the 6 year
38 mark. I cannot see myself ever being able to fulfill it, which is a shame.
39
40 This trend of creating difficult barriers is seemingly getting worse in
41 the last few proposals, both for users and developers.
42
43 I still say this is all a bad idea.
44
45 Brian

Attachments

File name MIME type
signature.asc application/pgp-signature