From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 011F2138334 for ; Fri, 1 Feb 2019 01:56:43 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B0267E0AF1; Fri, 1 Feb 2019 01:56:42 +0000 (UTC) Received: from mail-pf1-f195.google.com (mail-pf1-f195.google.com [209.85.210.195]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 72DA2E0ACE for ; Fri, 1 Feb 2019 01:56:42 +0000 (UTC) Received: by mail-pf1-f195.google.com with SMTP id w73so2354141pfk.10 for ; Thu, 31 Jan 2019 17:56:42 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=uKnVexHDBhhtsv260gXijXNE2+3mgFS/EsMuDLOTl+U=; b=pYSpnKGrRwDYk/8LACdid5O1Yllh7bfjc9uzhnd/XwK/BAluxHsRI86/b0JexejgfM tIMV77mBHkn6/TZZT4A79mNA8ua1kYWbvWYTNaeijU1cA4lvMXADaBD1DpVj+x436odf a6orqepoOrE1HVKsyqzMCD38QKVKqKX0rSXIRFyU4Nvou9y6yabSM82m4Koho0OzNXv4 dh99KgSfeRQMP9Z3CFy+R4EQ/cUApUxoXr80bhFrMxmQ0J1f4Qq76BNfSDVgXkWifPP9 815Y2hs4xeVjYr+1Ex9u0z3VUSn49HP0WOEG66Tt1sHtA7JZ00FqZnVVX0kWUx4s/sHS 7h9Q== X-Gm-Message-State: AHQUAuYBna4JuVjqgLz2G1vnjF/Lma9DisJ8byhzX1fuqi2hQ6sN5OLZ KI0OR5us9AwuVbnRL23duZenukzpqZlDNXu7iotBjg== X-Google-Smtp-Source: AHgI3IZihCOi6IjhyOuYfTnN5dO944mN5syg7tXlNxeqkepSHznmB/8icTeoY8dXVn8iIaH/Q92eRVO5GqGUUFY2IlI= X-Received: by 2002:a65:624c:: with SMTP id q12mr370922pgv.379.1548986200808; Thu, 31 Jan 2019 17:56:40 -0800 (PST) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 References: <1548943008.796.1.camel@gentoo.org> In-Reply-To: From: Rich Freeman Date: Thu, 31 Jan 2019 20:56:29 -0500 Message-ID: Subject: Re: [gentoo-project] pre-GLEP: Gentoo OpenPGP web of trust To: gentoo-project Content-Type: text/plain; charset="UTF-8" X-Archives-Salt: 960246ce-b818-4303-8520-6c1da1243d80 X-Archives-Hash: 8cf599d8f1a5510697c81e6c064b1be4 On Thu, Jan 31, 2019 at 7:55 PM Chris Reffett wrote: > > On 1/31/2019 7:42 PM, Kristian Fiskerstrand wrote: > > On 2/1/19 1:41 AM, Chris Reffett wrote: > >> but let me pose a more philosophical > >> question: _why should proving my real name matter_? > > > > It matters in the context of copyright law. > > > > That said, though, I'm talking about the GPG key itself here, not my > commits, and I think that verification of real identity through WoT is > an unreasonably high bar for claiming copyright. ++ I think there are a lot of good reasons to require real names. However, making that our policy and upholding it when we have cause to think a name is false doesn't require us to rigorously check IDs. Maybe for officers listed on filings for the Foundation it is more of a concern. IMO Gentoo developers should simply be asked to provide their real name, and to confirm that they are legally adults. I don't think we're doing anything that necessitates a higher level of due diligence than that unless somebody actually brings a potential specific concern to our attention. -- Rich