Re: Web of Trust work [Was: kernel.org tooling update]

On Sun, Mar 08, 2026 at 08:21:12AM +0100, Uwe Kleine-König wrote:
> Hello Greg,
> 
> On 1/23/26 10:29, Greg KH wrote:
> > On Fri, Jan 23, 2026 at 10:19:56AM +0100, Uwe Kleine-König wrote:
> >> On 12/10/25 05:48, Konstantin Ryabitsev wrote:
> >>> ## Web of Trust work
> >>>
> >>> There is an ongoing work to replace our home-grown web of trust solution (that
> >>> does work but has important bottlenecks and scaling limitations) with
> >>> something both more distributed and easier to maintain. We're working with
> >>> OpenSSF to design the framework and I hope to present it to the community in
> >>> the next few months.
> >>
> >> the current home-grown solution is https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/, right?
> >>
> >> I wonder what the bottlenecks and scaling limitations are that you mention.
> >>
> >> Is there some info available already now about the path you (and OpenSSF) intend to propose?
> > 
> > There will be a presentation about this in February at a conference and
> > hopefully it will be made public then as the work is still ongoing.
> 
> The event was
> https://lfms26.sched.com/event/2ETT5/the-first-person-linux-kernel-maintainer-verification-project-greg-kroah-hartman-linux-kernel-maintainer-daniela-barbosa-lf-decentralized-trust-glenn-gore-affinidi
> , right?
> 
> I don't find a way to profit from what was presented there, do you know
> if there is video coverage? Or is there other material about the
> proposal?

Yes, the session was recorded, but no, I do not know where the video is
just yet, sorry.  And there was lots of links in the video and
presentation to the code repos, hopefully it will be uploaded soon...

thanks,

greg k-h