Gentoo Archives: gentoo-project

From: Kristian Fiskerstrand <k_f@g.o>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications?
Date: Wed, 04 Jan 2017 21:27:31
Message-Id: a6d17fb8-ffa7-067f-ff67-15ce5e3096d0@gentoo.org
In Reply to: Re: [gentoo-project] Require OpenPGP signatures from existing devs on new developer applications? by "Michał Górny"
1 On 01/04/2017 10:17 PM, Michał Górny wrote:
2 >>> Isn't barrier of entry to Gentoo high enough already? I know many
3 >>> people refusing to join because they consider quizzes
4 >>> and the recruitment procedure to be too cumbersome and a waste of time.
5 >> No, I don't feel that this is conflicting, on some level it comes down
6 >> to a matter of more than technical skills, in this particular context
7 >> also establishing trust, both in terms of security and in the long term
8 >> responsibilities of both having commit access in general and maintaining
9 >> the packages picked up for maintenance.
10 > Are you assuming that having a verified proof of identity (well, more
11 > of the name since I suppose you won't be recording all his data) of
12 > a developer would prevent him from abusing his account?
13
14 I would certainly consider it less likely
15
16 --
17 Kristian Fiskerstrand
18 OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net
19 fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies