Re: Web of Trust work [Was: kernel.org tooling update]

[Greg KH <gregkh@linuxfoundation.org>]

On Fri, Jan 23, 2026 at 10:19:56AM +0100, Uwe Kleine-König wrote:
> Hello Konstantin,
> 
> On 12/10/25 05:48, Konstantin Ryabitsev wrote:
> > ## Web of Trust work
> > 
> > There is an ongoing work to replace our home-grown web of trust solution (that
> > does work but has important bottlenecks and scaling limitations) with
> > something both more distributed and easier to maintain. We're working with
> > OpenSSF to design the framework and I hope to present it to the community in
> > the next few months.
> 
> the current home-grown solution is https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/, right?
> 
> I wonder what the bottlenecks and scaling limitations are that you mention.
> 
> Is there some info available already now about the path you (and OpenSSF) intend to propose?

There will be a presentation about this in February at a conference and
hopefully it will be made public then as the work is still ongoing.

thanks,

greg k-h