Web of Trust work [Was: kernel.org tooling update]

Uwe Kleine-König <[email protected]> Fri, 23 Jan 2026 10:19:56 +0100

Newsgroups	dev.linux.lists.ksummit
Message-ID	<[email protected]>

Hello Konstantin,

On 12/10/25 05:48, Konstantin Ryabitsev wrote:
> ## Web of Trust work
> 
> There is an ongoing work to replace our home-grown web of trust solution (that
> does work but has important bottlenecks and scaling limitations) with
> something both more distributed and easier to maintain. We're working with
> OpenSSF to design the framework and I hope to present it to the community in
> the next few months.

the current home-grown solution is https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/, right?

I wonder what the bottlenecks and scaling limitations are that you mention.

Is there some info available already now about the path you (and OpenSSF) intend to propose?

Best regards
Uwe

OpenPGP_signature.asc (application/pgp-signature, 488 B)