Gentoo Archives: gentoo-project

From: Kristian Fiskerstrand <k_f@g.o>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications?
Date: Fri, 06 Jan 2017 09:14:08
Message-Id: 08dbc8ae-ca30-e745-ab7b-742fa044f333@gentoo.org
In Reply to: Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications? by Kent Fredric
1 On 01/06/2017 10:00 AM, Kent Fredric wrote:
2 > On Fri, 6 Jan 2017 09:18:59 +0100
3 > Michał Górny <mgorny@g.o> wrote:
4 >
5 >> It's called CA, and you've just switched from WoT to PKI model.
6
7 This isn't necessarily true, the WoT model can encompass CAs, and PKI
8 doesn't necessarily deviate from things much in terms of directionality
9 (WoT can also be a PKI). However it is often used synonymuously (in
10 error) with the X.509 Global Root PKIX.
11
12 > I am unware of any CA services that provide proof-of-physical-identity via cryptographic means.
13
14 CACert?
15
16 --
17 Kristian Fiskerstrand
18 OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net
19 fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies