Re: [gentoo-project] pre-GLEP: Gentoo OpenPGP web of trust

["Andreas K. Huettel" <dilfridge@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1377 bytes --]

Am Freitag, 1. Februar 2019, 02:56:29 CET schrieb Rich Freeman:
> On Thu, Jan 31, 2019 at 7:55 PM Chris Reffett <creffett@gentoo.org> wrote:
> > On 1/31/2019 7:42 PM, Kristian Fiskerstrand wrote:
> > > On 2/1/19 1:41 AM, Chris Reffett wrote:
> > >> but let me pose a more philosophical
> > >> question: _why should proving my real name matter_?
> > > 
> > > It matters in the context of copyright law.
> > 
> > That said, though, I'm talking about the GPG key itself here, not my
> > commits, and I think that verification of real identity through WoT is
> > an unreasonably high bar for claiming copyright.
> 
> ++
> 
> I think there are a lot of good reasons to require real names.
> However, making that our policy and upholding it when we have cause to
> think a name is false doesn't require us to rigorously check IDs.
> 
> Maybe for officers listed on filings for the Foundation it is more of a
> concern.
> 
> IMO Gentoo developers should simply be asked to provide their real
> name, and to confirm that they are legally adults.  I don't think
> we're doing anything that necessitates a higher level of due diligence
> than that unless somebody actually brings a potential specific concern
> to our attention.

++

-- 
Andreas K. Hüttel
dilfridge@gentoo.org
Gentoo Linux developer 
(council, toolchain, base-system, perl, libreoffice)

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]