On Wed, Sep 07, 2011 at 03:28:16AM -0400, Jean Delvare wrote: [ ... ] > > When you created this account on kernel.org, you used a PGP key to > identify yourself, didn't you? If you sign your message with that key, > then a few people (basically the kernel.org maintainers) will be able > to confirm that you are the same person who had a trusted kernel.org > account. I don't know if Linus has the list though. > > What surprises me a little is that I don't have your public key in my > keyring, and I can't seem to be able to find it on public servers > either. You really should push your key to public key servers, > otherwise a signed message from you has no value in general. > Yeah, one may notice that I am not a security guy and don't pay sufficient attention to such matters. > Obviously it's a little late now though. The whole idea of trust and > signatures is to keep the level of trust after odd events such as the > kernel.org break-in. For this, keys must have been exchanged, tested > and trusted long before said event happens. > Agreed. Guenter _______________________________________________ lm-sensors mailing list lm-sensors@xxxxxxxxxxxxxx http://lists.lm-sensors.org/mailman/listinfo/lm-sensors
