From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id BE269138334 for ; Fri, 1 Feb 2019 00:42:18 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 7B4ECE0885; Fri, 1 Feb 2019 00:42:17 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 37579E07C7 for ; Fri, 1 Feb 2019 00:42:17 +0000 (UTC) Received: from [192.168.1.109] (unknown [99.82.244.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: creffett) by smtp.gentoo.org (Postfix) with ESMTPSA id AFBF7335C06 for ; Fri, 1 Feb 2019 00:42:15 +0000 (UTC) Subject: Re: [gentoo-project] pre-GLEP: Gentoo OpenPGP web of trust To: gentoo-project@lists.gentoo.org References: <1548943008.796.1.camel@gentoo.org> From: Chris Reffett Openpgp: preference=signencrypt Autocrypt: addr=creffett@gentoo.org; prefer-encrypt=mutual; keydata= mQINBFMU5S0BEAC0SXlg2prWRkJomDQ7SjlZep9zs8N2WMxS1Olzi3WwLx5/0U7X28oWynE0 LNRan9oNV6to+E3hOB/8XIjod4pLjUdT6XkA4niMBgLvTOUgjPa7IDl6ZuBzn6DOWiktfDU5 pp/hDu36nyd0S6H+r30KuJLWLgvHOrrZa6i8eI1QfD+NQyyI9yFyOXsocWiIqm50uiUVnzEI Xn8uSFJrrVXURmiEHK45hNQTZz4RcRa8HTuu5joLIuVWAvdK56cix4VuDvg3YEgET459jTk3 YL2SSv/I98pOKEDqrl0GcVl4RkznBw62Sy61hDfLj1eODpfjOLIOrMMvDQR3Ozine+fsVQho YNLewPsXbjVlHFoJfEzYDBFg11/ewb6B6U6N0gXd9p0GeK0kymOxjOjtTPjWOto0jjs/H+L7 6LyQ0Ssv/dKLbw2YYcG9LpOxMAPI7/ZIGC61DEXpLBECxNt3FFTzpULJom/lHIZ4MBPp847E WwpM7Z/B6TGUxq83jF4jrhjK92Mc2atsxfv1vxTYh7i/m16ZWjFiGvyMiLHNI6mtvYhkGoLb irkbmwhxF0b+Wi6+YvE/feTYuuuUusFkhSpzVkYc7JXHtdE213CM2LjGk/6YwO7CDQFz4+e0 jUw50SBOO7AFPlHdGLbz3g6s5eSBMUxaw7It0k16DiECOLzzZQARAQABtDBDaHJpcyBSZWZm ZXR0IChHTEVQNjMgS2V5KSA8Y3JlZmZldHRAZ2VudG9vLm9yZz6JAj0EEwEIACcCGy8FCwkI BwMFFQoJCAsFFgMCAQACHgECF4AFAlslNZgFCQ2z6usACgkQyhpXVbaefssmCg//bmuEygY7 /n4QoF//79kAAGHlromEHpOSzkk/HUyr4TdWikgqU7u4uz2sHUt3bCj2cHCRe5uNhhWrP7rw 3VjTFLQuX9kvPAxG5/fS+DywnLHfW9Dy9OpW2EOpIQTIZIalvl9+xeQlP6s8mglmPjkJK2Kx MDywublrqNaopqPGACxLriOtaLKYiBu5UdIr2B15+W0OtjY310kVyuvnNJsg7si/iiwtlcUi ep4P8NnQxrLEqS3W5dE+NKF+bXyJA5azTlIVjleJQqfTXnAk4G3Is+3nqH1Qs0qPKgzwdari ftOTVwFgjafLQgCHoCpYpkabvgMthkjs/5LJTtz5o3bmYbr+LeLEVeJ0TjoY7ss0MOB2DgMb /tbXrDxVl0gJe5Y2VBrANbfjUVPKDf97tIlwEBPBvO+SPNpwRZYscmhX15F58kppI6BtgNOe /nc0/qtHHg7hYYpP5pMkKTHzEbOrN8ZnKt313tGQCPnx090zfB466/4mg83GX7V36cbgVhFG BQgg7xrKInKwQI5BNkz+io6O/VsQDBu5g97BDAJXTGk8MRDSRTq0jBJRRH3DrivVpDzfALND tiysri24dPUdjklOVmD1a9DivPVohbRjdUjIACSpEp0RsM4pMvmTSapC1A5NmeeI9O5hvfM8 w8qzJahOoGlAGDvnMOzw0TR6sbi5Ag0EUxTmAQEQAK/TGToCwq/CFnCWPE8hA11EdfT0tXCG I/kioIQIM4RM1NFLXz76DIL9LgBYLyBUOqTcRZ3gjgfsLf+rb7HSPC66EqDh+4Ww+RN/cCCQ 0ioHZtS/PrKi2dIFzddlXL953Vhd7RNG9I9nCi+/3pVEBf1i3UvaGUIVVxZY+5nKaX6pzQYR DzaLg6yuFN1OODA8TELIUP1dWf87/1a68C3v+eQD9JhuOFWBNzHHSi3eGXiFYCww4gfoHPgM lRIkDziovNbXAB1Pqywb/YU6njNSN1YwmSWqz+tsT/5rtCnQ/NYZhe9BWAZKNyEQ4AQeLXu9 DAQjtgP+ZNINcrvWP1Iqk/351Fqjz3xiUVMpRLNTxcuSpSpIWziJqnbt7c2E9xCVTOQv2CGc x9PNHBPeL0+RHQEzr+Z5pdKAe6buL4QCKwpX7I5nQDm6VWjfxrtp3P2yXEy6uS3YvEHtc5uX KRHOFIJ7T5PQIy9NBoO8KrzUA9/9y1NitYV1b+kapTlnAVmrEU61oJjhKvGXST+95G0lv8Hc DCN0GlATU/xva+r0qTDJFh1Es625bAGiDHdD4Hvh+kQU0/j06sreXT9SrT34OfEo32qUnqyJ wHB5wD0pssnfzpxjkCgUorqIGDAue4+L59ESoO6uAFV+yymkogBR5r4XBWLd/Ik0eJ/PJgE2 ij55ABEBAAGJBKQEGAEIAA8CGwIFAlslNY8FCQnxgw4CicG9IAQZAQgAZgUCUxTmAV8UgAAA AAAuAChpc3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0MTM4 MDQ4RjI4ODM4REUxNTU2NjYwODJGRDFCQUI2QjUyOERCMDI5QwAKCRDRura1KNsCnCnOD/kB UHTRY1Oojb+sNVYjznD84vRLiAVoDfXh8PAA9e5TAsfRp3RAAqOepu01eks5AweJJn7bGh6X VUYOyAN/hMjqEJ9X+RVdBa3I0n8r9MeXu5tNrzzLMUKwFBmFYYKP2BWiyt3SNgYI0+6OmTBq r5R8IYyKpyuZoIfkT/n7vyzGRVUf6+atsupyQcGfNBQlHQCf1G7yY29xod+j392a5vjnjKoX THNnMhh8u9CKxt6p6taBRuXN27ulwq0Hy9Yp7v0VLCnt/RoYRSEiGbjeuZSntGvINW/SjxZc rK4xsRFOV+hAsebW90kn5F33A/2FAyvtICX6eZpCZHHdlnuJg1PxqRJ8uLIdX6D2C6/78UsI 8LSsTkFM7qS2Ax9P1QGLTS6b6B/flsnYCip0zFfm0VCVj+BsGj24V4yuMhd7rJ9pFUSMK1jm FQHJgMN00eibUxI2mn0b2g+g4RPyHpuzCyC2XoGCvc+aaAtFnyoUctBMEWyaEe4iqUQaf1WR ip+TTbCfDr//qntyMgNJQs8AzLbcSIq3wgoYMptOve1H+7xgiusuE1mnqiEsCotxWUciGuFR ZMwtcKrWdnqoYXBZL5YhBikKnPK1P+jXiLI+ZHu/sxsQP/P2RKMwwro+k/6sI/Bbfvh6Phn2 2k0PoGTw4+qnYs8uNLwyzOlOqqadhCrtTwkQyhpXVbaefssi7g/+NdFdgcBWyH1KZvLYq/EM o3C0e+ggnb1RGsUIpLb2jttespgFlTDRyFdTrNvIobKEr+McG2/AALTYpPhkXNbNlnCGa0yc 2lWBy7BiLvig4uxKnxrZ2e0wNLkLvbD1Jx7aT0kzD/taHr/Zixsb5kBfKeT30aKx4HwuY9yf n4bur4FPEzHJOjyeJyt+OkUb7i1PONMTZmxYlwnmc+a0nF7DHkA6Cl2LvZ9dGOyqQfAZEAie B85NhcY3CHmeVtYnknE9vLi9LA0K0ks0GgnxJO62st6lMP4cKWsU6U8yNISiFAMhiHAGwaWA vOUlnK63DGc64LqS9+oHcwxxLfUgCUukJ1awHDuSvDYSc0nY/xPg3yaSf2TRcqCw9YWAELdb EB/bRqbJlKcnW1Yx0ARacGiWG13Np4LWquXGEBDlexSpRNPKJ2XVA7qY5Pds8onBoYg0jyMT xjfVEIckx5OVIecPy8rxJjJf4XaQiD0Jo941BXvNQdvXsgQn9QGMlASIoYmga/dLa0Sn+nu4 Rm+PjEoq0Wlyc9w4I26+J5/T+7KXjeZ92VgFrDXvsvS9wilpV9UiQoWM6lh6Tdo+tE721Iew vCxm3u45hp+5SD/qq2DIl4hkupP2JOW4Xyi+3AKiyX4sd4LhnnH8wsBSnjIf9WUM+F+OPBdj u072o3J/hR4IDb0= Message-ID: Date: Thu, 31 Jan 2019 19:41:52 -0500 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.5.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 In-Reply-To: <1548943008.796.1.camel@gentoo.org> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="wPYWsPIpbZ3bF4dXLuP6k2HbqLoJmeJGW" X-Archives-Salt: bd2da10e-f210-45b5-9514-b15f8ecc4717 X-Archives-Hash: b8080d0265946fd8294e76a5443a0211 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --wPYWsPIpbZ3bF4dXLuP6k2HbqLoJmeJGW Content-Type: multipart/mixed; boundary="lG3YTPyS8Rayk9p5ze7wnJXT22eOsuUME"; protected-headers="v1" From: Chris Reffett To: gentoo-project@lists.gentoo.org Message-ID: Subject: Re: [gentoo-project] pre-GLEP: Gentoo OpenPGP web of trust References: <1548943008.796.1.camel@gentoo.org> In-Reply-To: <1548943008.796.1.camel@gentoo.org> --lG3YTPyS8Rayk9p5ze7wnJXT22eOsuUME Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 1/31/2019 8:56 AM, Micha=C5=82 G=C3=B3rny wrote: >=20 > 3. Before signing a user identifier, make sure to: >=20 > b. Verify the person's real name (at least for the user identifier > used for copyright purposes). This is usually done through > verifying an identification document with photograph. It is > a good idea to ask for the document type earlier, and read on > forgery protections used. >=20 > In some cases, alternate methods of verifying the identity may be= > used if they provide equivalent or better level of reliability. > This can include e.g. use of national online identification > systems or bank transfers. >=20 I concur with the other comments people have made about this being an unnecessarily restrictive burden, but let me pose a more philosophical question: _why should proving my real name matter_? It's irrelevant that I can prove my real name is in fact Chris Reffett, what's more important is that there is somebody claiming the identity "creffett" whom people (theoretically) trust as a developer. If I can't prove that that's my real name, does that actually make a difference as to my trustworthiness as a dev? It's the online "persona," if you will, that people trust, and I don't see how verifying my name changes that. Now if I were trying to use my PGP key as proof of my real-world identity, sure, it's a reasonable concern, but I expect that if I'm involved in something like that I would have to supply a scan of an identity document anyway. And since I know someone will bring it up: yes, that is in fact my real name. I'm just making a point. -creffett --lG3YTPyS8Rayk9p5ze7wnJXT22eOsuUME-- --wPYWsPIpbZ3bF4dXLuP6k2HbqLoJmeJGW Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIcBAEBAgAGBQJcU5XjAAoJENG6trUo2wKcwwoP/i0sPq3A/ST8Jt1uxqLSC9mM WsiPODk+JuWy5aFFBv42HigIjENgKw6Ze7Yosig8zXEjqlzZp86ZYptQd0iIUFRH GEx3Ugj7QueWsvm63Zvmmw1dcxBBJR/BWAOdpvlTXLa/XGMcuLjxsvUDg96WoYOC DZhS01qmzN3N45iCL1CbaqRsRQzLK4d8paX8ktImu7xKRdQrMtjxzkomzv9zdFO/ hXNY5j8J15F8Z1jhBTl107gO97xFUWTa//dPWaA90ozru6xaa41IhJ05TGizn6tE HPxpRzkt5HCdBySQNrmcxV5Z/SW7TW490XEOckAyaG7J3lD9HGzFTSoN3yTn3cht 1GlJJRsmfHp1YrTUoHcFXI1fqCQDmGT7jzNR2rN6tufwgfZfITfNInug80Bqai1a jfj7IEYG5OfPhjql7hS2NEtyApww6MrqxjINcLbk1BVfQ6xSf4r5fH7pMr5gtW79 I0odRzszycQrMnWCujjYUIHd5//I7WKzz549FkscjDSKrRaZMkSCc8uyayD/rjmp 2J2HMVqd1Xz/Bs2fy5WOM9go0G6Ik86a0Nvz/+yAhJFP9Wr1I/Rl3zzOaPEIaLWP SiSKkMK5Y7hQCc5IK0VTFx05X5t16DsoJlyCEf3vTKWa6HwWBLuROpn9rUiG7exp +UO9GhZDvluyWdv1htbd =lXBr -----END PGP SIGNATURE----- --wPYWsPIpbZ3bF4dXLuP6k2HbqLoJmeJGW--