From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 386EB35BDB2 for ; Sun, 8 Mar 2026 10:24:22 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772965463; cv=none; b=UC3hwIRx1AvbYuic3Ntd4YNTKUobtXN/ZiwuhNsrYBS4F2fuauZW53a+bd1ZD2TlP5crcYkfgNHZpnuJlN8+PfudRbUg9PzfR2SiPlTRt7Xs+Vk//TBN9x0Xh+uL7+UUcZdmjugRpSQP4QjrOpUmEtt816qxa43qjFC16CFd7U4= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772965463; c=relaxed/simple; bh=yRRZRn26D+KM+1xZ6a2qrMxDJ02uPVT2R1D9iDoD8uQ=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=HzeMl+MyaywqVMOBblHlNRn3rnR7KFwFsgXinAKMR7CP9oPerDyUp0Y5iZl+YoMz9s0/vM/I3VJ/8r6z1OrrhJjyJv4+DjscRvdQPAtsuGmuSnT+W98TRGNXmt4Kcrr1MgUPx51FEHwPL4wi7YxlL0upflezfS4n8EYer33YbY4= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=r4/r+LKE; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="r4/r+LKE" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 3CAB0C116C6; Sun, 8 Mar 2026 10:24:22 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1772965462; bh=yRRZRn26D+KM+1xZ6a2qrMxDJ02uPVT2R1D9iDoD8uQ=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=r4/r+LKE5DX8C2Fs+3a0UAlnn7x/GX8fpnt3kuTs4fBCa670u3cL/3zWksga82E5y ErV6T4jN5T7kFA8OSS2BeNV63szBIMqOGAepFiQs56mSuvChhdqPd8E0XJilH977CH R8xD6JCisePVzIDMbT7drhFgimfz1jWfC2r1LNps= Date: Sun, 8 Mar 2026 11:24:20 +0100 From: Greg KH To: Uwe =?iso-8859-1?Q?Kleine-K=F6nig?= Cc: Konstantin Ryabitsev , users@kernel.org, ksummit@lists.linux.dev Subject: Re: Web of Trust work [Was: kernel.org tooling update] Message-ID: <2026030838-kissing-liftoff-a634@gregkh> References: <20251209-roaring-hidden-alligator-068eea@lemur> <6e0c8c00-4efe-432a-92e8-c51aa15b4a34@kernel.org> <2026012340-cannot-spud-5d46@gregkh> <3dd58b76-7461-4e8b-9dc6-a936a41d8faa@kernel.org> Precedence: bulk X-Mailing-List: ksummit@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <3dd58b76-7461-4e8b-9dc6-a936a41d8faa@kernel.org> On Sun, Mar 08, 2026 at 08:21:12AM +0100, Uwe Kleine-König wrote: > Hello Greg, > > On 1/23/26 10:29, Greg KH wrote: > > On Fri, Jan 23, 2026 at 10:19:56AM +0100, Uwe Kleine-König wrote: > >> On 12/10/25 05:48, Konstantin Ryabitsev wrote: > >>> ## Web of Trust work > >>> > >>> There is an ongoing work to replace our home-grown web of trust solution (that > >>> does work but has important bottlenecks and scaling limitations) with > >>> something both more distributed and easier to maintain. We're working with > >>> OpenSSF to design the framework and I hope to present it to the community in > >>> the next few months. > >> > >> the current home-grown solution is https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/, right? > >> > >> I wonder what the bottlenecks and scaling limitations are that you mention. > >> > >> Is there some info available already now about the path you (and OpenSSF) intend to propose? > > > > There will be a presentation about this in February at a conference and > > hopefully it will be made public then as the work is still ongoing. > > The event was > https://lfms26.sched.com/event/2ETT5/the-first-person-linux-kernel-maintainer-verification-project-greg-kroah-hartman-linux-kernel-maintainer-daniela-barbosa-lf-decentralized-trust-glenn-gore-affinidi > , right? > > I don't find a way to profit from what was presented there, do you know > if there is video coverage? Or is there other material about the > proposal? Yes, the session was recorded, but no, I do not know where the video is just yet, sorry. And there was lots of links in the video and presentation to the code repos, hopefully it will be uploaded soon... thanks, greg k-h