Re: Keysigning in times of COVID-19

2020-08-20 Thread Russ Allbery
Jonas Smedegaard writes: > Any opinion on the "votes twice" part? Anyone? How many decisions have we had that were decided by a slim enough margin that you believe fraud could have changed the outcome? What have we voted on that you think anyone would care sufficiently about to do the tedious a

Re: Keysigning in times of COVID-19

2020-08-20 Thread Jonas Smedegaard
Quoting Philip Hands (2020-08-20 10:05:42) > rhkra...@gmail.com writes: > > > On Wednesday, August 19, 2020 09:33:04 AM Wouter Verhelst wrote: > >> If the term "malicious DD" is reasonable, we have a bigger problem > >> than "votes twice" or "uploads a backdoor". > >> > >> aka, "a malicious DD e

Re: Keysigning in times of COVID-19

2020-08-20 Thread Ansgar
On Thu, 2020-08-20 at 10:05 +0200, Philip Hands wrote: > Conjuring up a "mallicious DD" seems to carry with it the assumption > that only bad people do bad things, which seems naive to me. > > This conversation reminds me of the trade-offs involved in airport > security. > > One can decide to spe

Re: Keysigning in times of COVID-19

2020-08-20 Thread Andrey Rahmatullin
On Thu, Aug 20, 2020 at 10:05:42AM +0200, Philip Hands wrote: > If I were a sociopath contemplating sabotage in the Free Software > sphere, going to the effort of becoming a DD, even for the first time, > would be nowhere near the top of my list. Indeed, I would sabotage some upstream code directly

Re: Keysigning in times of COVID-19

2020-08-20 Thread Philip Hands
rhkra...@gmail.com writes: > On Wednesday, August 19, 2020 09:33:04 AM Wouter Verhelst wrote: >> If the term "malicious DD" is reasonable, we have a bigger problem than >> "votes twice" or "uploads a backdoor". >> >> aka, "a malicious DD exists" is already a problem. > > Do you have a suggested s