Gentoo Archives: gentoo-project

From: "Paweł Hajdan
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications?
Date: Thu, 05 Jan 2017 13:10:20
Message-Id: aee492f5-b0da-4068-459c-6e649d5c8291@gentoo.org
In Reply to: Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications? by Michael Orlitzky
1 On 04/01/2017 22:19, Michael Orlitzky wrote:
2 > b) Verify that we can each SSH into dev.gentoo.org, confirming
3 > that I am really mjo and that he is really pesa. Again, we
4 > already know that the guy who has mjo's key is mjo and the guy
5 > who has pesa's key is pesa. Nothing new is learned.
6
7 Somewhat off-topic nit-picking: how would you verify the other person is
8 connecting to the real dev.gentoo.org instead of some local trickery on
9 their machine?
10
11 Paweł

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies