Re: Web of Trust work [Was: kernel.org tooling update]

Uwe Kleine-König <[email protected]> Sun, 8 Mar 2026 08:21:12 +0100

Newsgroups	dev.linux.lists.ksummit
Message-ID	<[email protected]>

Hello Greg,

On 1/23/26 10:29, Greg KH wrote:
> On Fri, Jan 23, 2026 at 10:19:56AM +0100, Uwe Kleine-König wrote:
>> On 12/10/25 05:48, Konstantin Ryabitsev wrote:
>>> ## Web of Trust work
>>>
>>> There is an ongoing work to replace our home-grown web of trust solution (that
>>> does work but has important bottlenecks and scaling limitations) with
>>> something both more distributed and easier to maintain. We're working with
>>> OpenSSF to design the framework and I hope to present it to the community in
>>> the next few months.
>>
>> the current home-grown solution is https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/, right?
>>
>> I wonder what the bottlenecks and scaling limitations are that you mention.
>>
>> Is there some info available already now about the path you (and OpenSSF) intend to propose?
> 
> There will be a presentation about this in February at a conference and
> hopefully it will be made public then as the work is still ongoing.

The event was
https://lfms26.sched.com/event/2ETT5/the-first-person-linux-kernel-maintainer-verification-project-greg-kroah-hartman-linux-kernel-maintainer-daniela-barbosa-lf-decentralized-trust-glenn-gore-affinidi
, right?

I don't find a way to profit from what was presented there, do you know
if there is video coverage? Or is there other material about the
proposal?

Best regards
Uwe

OpenPGP_signature.asc (application/pgp-signature, 488 B)