From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Q3DSN-0006US-Cp for garchives@archives.gentoo.org; Fri, 25 Mar 2011 20:18:03 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 83EE51C0AF; Fri, 25 Mar 2011 20:17:49 +0000 (UTC) Received: from mail-iy0-f181.google.com (mail-iy0-f181.google.com [209.85.210.181]) by pigeon.gentoo.org (Postfix) with ESMTP id C7DC31C086 for ; Fri, 25 Mar 2011 20:17:18 +0000 (UTC) Received: by iyb26 with SMTP id 26so1835372iyb.40 for ; Fri, 25 Mar 2011 13:17:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:in-reply-to:references:from :date:x-google-sender-auth:message-id:subject:to:content-type :content-transfer-encoding; bh=LuUluh/BM+ZU3IqQG2VVeGh0GYliU3c0on9oaJjLxI8=; b=KVTTIo/9kyuOyZeq02s3Oo1+5nWSfv4xjj522P5VwlDi0ycJObcm23R2iwCbpg0Kz3 69MouG5Ath5xLwIrhiYIhBYFo1jHHIRUJIrK85aGTPbrIgBxw55f/9nf9iBQJuqnb4Q+ Fc7eEdZTKCZi2AVncMbUHmO614Whj5sBq9AkA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:content-type :content-transfer-encoding; b=CRHqIkKBwbwmYV1pD99U+NqSUsDn+jBzXWJj0J1FN0dsqgRtS470NIEoRSy8KSUIKe hx7lw4i/P5fARs+vTpx0iPk48f+qugwQBLAdSY0lq078g3glsNwzP5y0n0/le58NPJN4 2Q0uQHY/LA8hs3x1LJ719c+EJbXbVh+84z5m8= Received: by 10.231.185.105 with SMTP id cn41mr1232152ibb.72.1301084238111; Fri, 25 Mar 2011 13:17:18 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Sender: vapierfilter@gmail.com Received: by 10.231.11.195 with HTTP; Fri, 25 Mar 2011 13:16:58 -0700 (PDT) In-Reply-To: <201103252050.13759.dilfridge@gentoo.org> References: <201103250953.19757.dilfridge@gentoo.org> <201103252050.13759.dilfridge@gentoo.org> From: Mike Frysinger Date: Fri, 25 Mar 2011 16:16:58 -0400 X-Google-Sender-Auth: Fjfv6P9f0LQ8xspI0QF_5T9hwDw Message-ID: Subject: Re: [gentoo-dev] Re: rejecting unsigned commits To: gentoo-dev@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Archives-Salt: X-Archives-Hash: b4eb95aed1c22f4a6581a6909ebcb7b4 On Fri, Mar 25, 2011 at 3:50 PM, Andreas K. Huettel wrote: >> > * The key must have an userid that refers to an official Gentoo e-mail >> > address. E.g. dilfridge@gentoo.org >> >> no. =A0there's no reason for this requirement, and it prevents proxy >> maintenance long term. =A0e-mail addresses do not verify identity, >> verifying identify verifies identity. =A0this is the point of the web of >> trust. > > So what sort of identity do you want to verify? Seriously, at the moment = when I got my commit bit, noone from Gentoo had ever met me in person, and = for sure noone had ever had a look at my passport or any similar legal docu= ment. The only established connection was my preexisting gpg key, which was= then coupled to my gentoo account. and no where do we require you to generate a gpg key bound to the Gentoo e-mail address. we require you to provide a gpg key only. like you said *right here*, we have 0 information to identify you, and using a Gentoo e-mail address adds *nothing* to that. so why add a completely useless requirement ? > As for proxy maintenance, isn't the whole point of that that the proxied = maintainers are not devs and do not have (commit access | a gentoo.org user= id)? I do not understand how this would prevent proxy maintenance. uhh, you already pointed out how -- git. if i pull updates from a proxy maintainer, it's going to have his signing. -mike