From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 920CF138334 for ; Fri, 1 Feb 2019 12:53:00 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 7E784E0C17; Fri, 1 Feb 2019 12:52:59 +0000 (UTC) Received: from mo6-p05-ob.smtp.rzone.de (mo6-p05-ob.smtp.rzone.de [IPv6:2a01:238:20a:202:5305::9]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 1FF3DE0C15 for ; Fri, 1 Feb 2019 12:52:58 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1549025577; s=strato-dkim-0002; d=akhuettel.de; h=References:In-Reply-To:Message-ID:Date:Subject:Cc:To:From: X-RZG-CLASS-ID:X-RZG-AUTH:From:Subject:Sender; bh=ch/AfE75TNtxUqcC7QeqXE4nZDQtPLAoa1guy0YOOjY=; b=hGaNN5nlenKDElrn/GhcTsMQGULLMB/vuQO7x+xuppwkpHEl/aIqfrXIgwfWwiPrRP zIp7l7HV2VS6D0V2SgfsAqNStQZoAnmqL0zYU5LPkfUpYOdK0qSLLpSIwQOiotRnqedF T92NKPxrQk0Zb7tm8tw53C2gU7fYDMibUTi56vWlcZAZJnLyzzC5HH8rHg1MYQiAQFKc vEFvZlWN6oMijwp0ZYTJMSTEJj3wMMI5g5F2/lWmxln3oYII3+oG5MEUKINUl8mn66Q2 cucv7f7mB5t2TrUj7Q37gk2dVwbs9mDTThfaxzNRlXML6GmdGgUArQ2WNfquwKKcFmSw CGYw== X-RZG-AUTH: ":IW0NeWCpcPchHrcnS4ebzBgQnKHTmkWA4CWORNSv8N53ayXN3oevcYUH1GZ/bxBHaw==" X-RZG-CLASS-ID: mo05 Received: from porto.localnet by smtp.strato.de (RZmta 44.9 DYNA|AUTH) with ESMTPSA id L0904av11CqrnGT (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (curve secp521r1 with 521 ECDH bits, eq. 15360 bits RSA)) (Client did not present a certificate); Fri, 1 Feb 2019 13:52:53 +0100 (CET) From: "Andreas K. Huettel" To: gentoo-project@lists.gentoo.org Cc: Rich Freeman Subject: Re: [gentoo-project] pre-GLEP: Gentoo OpenPGP web of trust Date: Fri, 01 Feb 2019 13:52:50 +0100 Message-ID: <3632143.Zo7t0miSdB@porto> Organization: Gentoo Linux In-Reply-To: References: <1548943008.796.1.camel@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart9170280.HHh1ooKhdr"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Archives-Salt: 306efc53-2826-449b-8f37-b3ee73aee345 X-Archives-Hash: 015c3d47dbf9e3870991f33e1c840ea7 --nextPart9170280.HHh1ooKhdr Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1" Am Freitag, 1. Februar 2019, 02:56:29 CET schrieb Rich Freeman: > On Thu, Jan 31, 2019 at 7:55 PM Chris Reffett wrote: > > On 1/31/2019 7:42 PM, Kristian Fiskerstrand wrote: > > > On 2/1/19 1:41 AM, Chris Reffett wrote: > > >> but let me pose a more philosophical > > >> question: _why should proving my real name matter_? > > >=20 > > > It matters in the context of copyright law. > >=20 > > That said, though, I'm talking about the GPG key itself here, not my > > commits, and I think that verification of real identity through WoT is > > an unreasonably high bar for claiming copyright. >=20 > ++ >=20 > I think there are a lot of good reasons to require real names. > However, making that our policy and upholding it when we have cause to > think a name is false doesn't require us to rigorously check IDs. >=20 > Maybe for officers listed on filings for the Foundation it is more of a > concern. >=20 > IMO Gentoo developers should simply be asked to provide their real > name, and to confirm that they are legally adults. I don't think > we're doing anything that necessitates a higher level of due diligence > than that unless somebody actually brings a potential specific concern > to our attention. ++ =2D-=20 Andreas K. H=FCttel dilfridge@gentoo.org Gentoo Linux developer=20 (council, toolchain, base-system, perl, libreoffice) --nextPart9170280.HHh1ooKhdr Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE2dlecvcVU8/ThuQ/jJJgxvbXoxAFAlxUQSIACgkQjJJgxvbX oxDafw/+MtfMbSitK9C9Z1FSWgrxI7YNH2J1Ft6QbOhmwqEqfBBq+HNXQoEX+x7M WQMYQXj1s9rrFox+agSGRNsQBzXsGf/CtgUXDsS8y6VWCL8NPUVgv1BgQxHGuWYS p9tSMUk7MZ/J7ISzCt/TZxM2BxzqsD3CdzkDk4XmSrJmLlacyqE8fAnttItP9KSV Hq74VNePF3AvizNgJRIkv2MXGnGLk/DApgZ7ucyavxCBz7bbQgwr3nA0XKmtbFEi Mr57zNC2Y8s4m9p3F8U80DjKPvlvcySbh4MqIF/kfX3eOPubjIKQCv1m6Rofg3Zm TsFPF6R2mW6LTX05xKA5iwfCS0lbPQJe2Y5R3bzsj44hASNVHxP59SxtvsXgVyrH N4+AzXAsObHSUY84QUgiZcg+UEwUPWdp4dkVugi38cpJBif9VALdJmO75Gjkai1Z agKxdfLSsK2gzIlfl1vHvccJFt/xYj94l70ok3vhW5cPADoFflLpPnXOfkai5puC 75K6Bc4V3Dzb7Nri73xzCQR7h0iKlQ2sIJzKXzMmxshMUBVnoKssm6uyrIThdS5S on7/IpA0qKgEl+Vf+LpO72XLNx7BvzX+TcC9Y+vZBbIhz+hi8zySM3QLHfiIhZaM Bo1OlclLROWzb0A3yIQswDeBOOVGaU3/86qHWqXxr5Of6uAR26Y= =vwcO -----END PGP SIGNATURE----- --nextPart9170280.HHh1ooKhdr--