From: | "Paweł Hajdan | ||
---|---|---|---|
To: | gentoo-project@l.g.o | ||
Subject: | Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications? | ||
Date: | Thu, 05 Jan 2017 13:10:20 | ||
Message-Id: | aee492f5-b0da-4068-459c-6e649d5c8291@gentoo.org | ||
In Reply to: | Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications? by Michael Orlitzky |
1 | On 04/01/2017 22:19, Michael Orlitzky wrote: |
2 | > b) Verify that we can each SSH into dev.gentoo.org, confirming |
3 | > that I am really mjo and that he is really pesa. Again, we |
4 | > already know that the guy who has mjo's key is mjo and the guy |
5 | > who has pesa's key is pesa. Nothing new is learned. |
6 | |
7 | Somewhat off-topic nit-picking: how would you verify the other person is |
8 | connecting to the real dev.gentoo.org instead of some local trickery on |
9 | their machine? |
10 | |
11 | Paweł |
File name | MIME type |
---|---|
signature.asc | application/pgp-signature |
Subject | Author |
---|---|
Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications? | Michael Orlitzky <mjo@g.o> |