Open Source Security Foundation

Re:Open Source Security Foundation by jacques_chester on Saturday March 27, 2021 @10:47PM (#26607513)

Whether or not there is an impenetrable fake identity is a different question from "now that identity Foo is untrustworthy, what other things do I need to inspect?"

[ Parent | on HN ]

Re:Open Source Security Foundation by RcouF1uZ4gsC on Sunday March 28, 2021 @01:20AM (#26608182)

For that, you don’t need any type of real world identity. If you require that people sign their commits/reviews with a PGP key and base their reputation on that, that still gives you much the same benefit, while at the same time allowing people to be anonymous.

[ Parent | on HN ]

Re:Open Source Security Foundation by jacques_chester on Sunday March 28, 2021 @01:15PM (#26612114)

To be clear, I agree.

The point I was trying to make was that stable identity, whether real or pseudonymous, has value in a security context.

[ Parent | on HN ]