Gentoo Archives: gentoo-project

From: Mart Raudsepp <leio@g.o>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications?
Date: Fri, 06 Jan 2017 17:40:01
Message-Id: 1483724394.1349.4.camel@gentoo.org
In Reply to: Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications? by Yury German
1 Ühel kenal päeval, R, 06.01.2017 kell 11:30, kirjutas Yury German:
2 > OK we can do all of that. 
3 >
4 > Would a notary document verifying the person that is Mailed to a
5 > party (pick an address and a responsible person), be enough to
6 > authenticate the person for the original GPG Web of Trust? In my
7 > opinion if lets say I was the one receiving the document that has be
8 > signed by a notary public, with a GPG key fingerprint on that form,
9 > and a photo verification by the Notary (Legally binding document).
10 > Then I would say that they are who they say they are.
11 >
12 > Any opinions?
13
14 This is just insane. We already suffer with unwillingness of people to
15 become a developer with all the process involved. Until these are
16 resolved, throwing more in is just unacceptable. Period.
17
18 > Just an FYI on the cost. In most places a Notary Public is free at
19 > the bank (In US), or a cost of $5 or under. Not sure about other
20 > countries though. We do not want to make this cost prohibitive.
21
22 The procedure or cost should not exist, or reimbursed with time cost as
23 well.
24
25 But lets not go crazy here with the bureaucracy, Ok?
26
27 You don't need to know who I am, you are not getting my copyright
28 assignment anyways. But you are getting my contributions under an open
29 source license. Lets have more people willing to do so, not throw in
30 hurdles.

Replies