Re: [gentoo-dev] Keysigning at LWE

[Corey Shields <cshields@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1807 bytes --]

On Wed, 2003-07-30 at 11:46, Fred Van Andel wrote:
> I think some people are getting too hung up on the identity thing.
> 
> Within the context of the gentoo community does it matter what the real name of someone is?  The only identity that ultimately matters is the identity that has cvs access, and to a lesser extent the identity that appears on irc.

If someone decides to use a different identity online, that's cool.
However, they shouldn't take offense to the rest of us signing each
others keys.

<snip>

> To me a signature on a gentoo address means that I am verifying that this identity is a gentoo developer, and I don't need to see government ID for that. In fact official ID gets in the way. I know carpaski is a gentoo developer, but I don't know that this particular individual who is presenting me with ID that says "Nicolas Jones" is in fact carpaski.  He could be a completely different "Nicolas Jones" and I have no way of telling them apart.

Some of us use the gentoo.org address as a secondary UID on our primary
gpg key.  Therefore, I would rather know that who I am signing (and visa
versa) is the identity of that person.  Best way to do that is with a
photo ID.

If you have a solution for signing keys of people with identities that
are not their own, maybe that should be used for those people.  

> I realize this might piss off some and I am sorry, but this has been bothering me for some time and I want to vent.

No, not at all..   kind of expected some fallout when I posted the
idea.  There are a few of us who will be signing our keys when we meet
at LWE, and so we just wanted to extend the invitation to anyone else in
the gentoo community.

Cheers!

-- 
Corey Shields - Gentoo Linux Infrastructure Team
http://www.gentoo.org/~cshields

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]