Re: [Gnu-arch-users] Re: Common merge request format

[James Blackwell]

> Robin Green wrote:
>> In a coding
>> context I think trust is gained through submitting lots of good code -
>> not through having a key with a strong signature path between the submitter
>> and the recipient.
>

Then Aaron Bentley wrote:
> What would happen if mail.gnu.org were compromised?  It could insert 
> false signatures, which you'd gradually grow to trust.*  Then the 
> cracker sends you a signed merge request with a trojan.  What are you 
> likely to do?

No, it can't insert false signatures -- at least not any of any
significance. 

I'm hoping that as time passes, we can all start meeting each other and
signing each other's keys. In fact, I'm hoping that Tom and I can swap
signatures in the near future. 

Is there anybody that's reasonably close to NorthEastern PA that is
interested in a keysigning party?

-- 
James Blackwell          Please do not send me carbon copies of mailing
Smile more!              list posts. Such mail is unsolicited. Thank you!

GnuPG (ID 06357400) AAE4 8C76 58DA 5902 761D  247A 8A55 DA73 0635 7400