Re: Web of Trust work [Was: kernel.org tooling update]

On Sun, Mar 08, 2026 at 11:24:20AM +0100, Greg KH wrote:
> On Sun, Mar 08, 2026 at 08:21:12AM +0100, Uwe Kleine-König wrote:
> > Hello Greg,
> > 
> > On 1/23/26 10:29, Greg KH wrote:
> > > On Fri, Jan 23, 2026 at 10:19:56AM +0100, Uwe Kleine-König wrote:
> > >> On 12/10/25 05:48, Konstantin Ryabitsev wrote:
> > >>> ## Web of Trust work
> > >>>
> > >>> There is an ongoing work to replace our home-grown web of trust solution (that
> > >>> does work but has important bottlenecks and scaling limitations) with
> > >>> something both more distributed and easier to maintain. We're working with
> > >>> OpenSSF to design the framework and I hope to present it to the community in
> > >>> the next few months.
> > >>
> > >> the current home-grown solution is https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/, right?
> > >>
> > >> I wonder what the bottlenecks and scaling limitations are that you mention.
> > >>
> > >> Is there some info available already now about the path you (and OpenSSF) intend to propose?
> > > 
> > > There will be a presentation about this in February at a conference and
> > > hopefully it will be made public then as the work is still ongoing.
> > 
> > The event was
> > https://lfms26.sched.com/event/2ETT5/the-first-person-linux-kernel-maintainer-verification-project-greg-kroah-hartman-linux-kernel-maintainer-daniela-barbosa-lf-decentralized-trust-glenn-gore-affinidi
> > , right?
> > 
> > I don't find a way to profit from what was presented there, do you know
> > if there is video coverage? Or is there other material about the
> > proposal?
> 
> Yes, the session was recorded, but no, I do not know where the video is
> just yet, sorry.  And there was lots of links in the video and
> presentation to the code repos, hopefully it will be uploaded soon...

Ah, found it, and a long blog post that has links and text:
	https://www.lfdecentralizedtrust.org/blog/decentralized-trust-infrastructure-at-lf-a-progress-report