incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Noah Slater <nsla...@tumbolia.org>
Subject Re: key signing - trust path check
Date Wed, 10 Oct 2012 21:23:56 GMT
This is awesome! Unfortunately I (61D50B88) am not in the strong set.
Bummer. :(

On Wed, Oct 10, 2012 at 2:43 PM, Shane Curcuru <asf@shanecurcuru.org> wrote:

> Anyone interested in details of PGP signing and tracing trust paths at the
> ASF should say thank you to long-time member henkp who has done a ton of
> work documenting and verifying release signing and keys:
>
>   https://people.apache.org/~**henkp/trust/<https://people.apache.org/~henkp/trust/>
>
> - Shane
>
> On 10/8/2012 6:37 PM, Noah Slater wrote:
>
>> Found one... Just poking around manually...
>>
>> J. Daniel Kulp <dkulp@apache.org>
>> http://pgp.mit.edu:11371/pks/**lookup?op=vindex&search=**
>> 0x858FC4C4F43856A3<http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x858FC4C4F43856A3>
>>
>> Signed by Carsten Ziegeler <cziegeler@apache.org>
>> http://pgp.mit.edu:11371/pks/**lookup?op=vindex&search=**
>> 0x132E49D4E41EDC7E<http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x132E49D4E41EDC7E>
>>
>> Signed by Marcus Crafter <crafterm@debian.org>
>> http://pgp.mit.edu:11371/pks/**lookup?op=vindex&search=**
>> 0x394D2FE3C4C57B42<http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x394D2FE3C4C57B42>
>>
>> And all Debian folk are connected, as per my pervious email. :)
>>
>> There should be a tool for this!
>>
>> On Mon, Oct 8, 2012 at 11:23 PM, Benson Margulies <bimargulies@gmail.com
>> >wrote:
>>
>>  Let's try a little statistically-invalid experiment of sample size
>>> one. The last time I had a key signed at Apache, it was by Dan Kulp.
>>> Now, pretend that you are a suspicious user of one of the many Maven
>>> plugins releases that I RM. Can you reach Dan from yourself in the
>>> web? Is there anyone you, personally, trust who starts a chain that
>>> leads to him?
>>>
>>> ------------------------------**------------------------------**
>>> ---------
>>> To unsubscribe, e-mail: general-unsubscribe@incubator.**apache.org<general-unsubscribe@incubator.apache.org>
>>> For additional commands, e-mail: general-help@incubator.apache.**org<general-help@incubator.apache.org>
>>>
>>>
>>>
>>
>>
> ------------------------------**------------------------------**---------
> To unsubscribe, e-mail: general-unsubscribe@incubator.**apache.org<general-unsubscribe@incubator.apache.org>
> For additional commands, e-mail: general-help@incubator.apache.**org<general-help@incubator.apache.org>
>
>


-- 
NS

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message