On Thu, 25 Sep 2003 22:07:16 -0700 (PDT) (Subject: Re: establish a trust relationship (Re: missing signatures)) Ask Bjoern Hansen <[EMAIL PROTECTED]> wrote:
> > A chain of trust can have more than one link. Assuming there is someone > > in Japan who has once been to a country with an ASF member, geography need > > not be a barrier. > > Eh, there are many other reasonable ways to establish a chain of > trust than a personal meeting. In some contexts they might even be > superior. > > Some combination of the following would be as hard to attack as > pretending to be someone else in a personal meeting: > > I mostly know you as the guy who sends mail from [EMAIL PROTECTED] > You send me your key signature from that address; I respond with a > token and you send the token back. Maybe afterwards I wait a month > or two and follow your use of that email address. If you keep > sending useful patches to similar things as you've done in the past, > that's a good indication. > > We have postal addresses of ASF members on file. Tokens and key > signatures can be sent back and forth via postal mail. Ahh. Maybe, the best way would be the establishment of the *trust chain* between "[EMAIL PROTECTED]" (or equivalent one) and each committers/members ... ?! If there are volunteers (in the United States) who manage the KEYS of each committers, it would be realistic and really make sense. -- As far as postal address is concerned, the ASF already has all the *NEW* committers' real addresses , I guess (Since we had to sign the singature to CLA and write real address, as far as I could see). -- I am not a member of the ASF, so I can not handle (no privs of the determination of the *usage* of money) how to use the fund of the Foundation. However, I think I would be very glad if some of the Fund will be made full use of in the "establish a trust relationship" of each committers/members and developers. Thank you for reading. __ Tetsuya <[EMAIL PROTECTED]> __ P.S. "committers" module would give us the breakthrough in it!? --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
