Re: [lm-sensors] [GIT PULL] hwmon fixes for 3.1

From: Guenter Roeck
Date: Wed Sep 07 2011 - 12:01:29 EST


On Wed, Sep 07, 2011 at 03:28:16AM -0400, Jean Delvare wrote:
[ ... ]
>
> When you created this account on kernel.org, you used a PGP key to
> identify yourself, didn't you? If you sign your message with that key,
> then a few people (basically the kernel.org maintainers) will be able
> to confirm that you are the same person who had a trusted kernel.org
> account. I don't know if Linus has the list though.
>
> What surprises me a little is that I don't have your public key in my
> keyring, and I can't seem to be able to find it on public servers
> either. You really should push your key to public key servers,
> otherwise a signed message from you has no value in general.
>
Yeah, one may notice that I am not a security guy and don't pay sufficient
attention to such matters.

> Obviously it's a little late now though. The whole idea of trust and
> signatures is to keep the level of trust after odd events such as the
> kernel.org break-in. For this, keys must have been exchanged, tested
> and trusted long before said event happens.
>
Agreed.

Guenter
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/