[Xorg] New committer process?

[Jeremy C. Reed]

On Mon, 14 Jun 2004, Keith Packard wrote:

> > Isn't SSH safe enough?
> > commiting with SSH sounds preety good way to prevent spoofing IMHO
>
> My question was higher level -- how do we authenticate people we give
> accounts to on the machine in the first place.  Right now, we're mostly
> letting each project vette people with informal irc or email
> "authentication"; that works pretty well when you know the people involved,
> otherwise it doesn't work.

One of the groups I am a member of requires GPG/PGP keys signed by another
member already part of the project.

And they have to meet in person (I was told) for the verification.

Also, we require sponsors.

 Jeremy C. Reed

 	  	 	 BSD News, BSD tutorials, BSD links
	  	 	 http://www.bsdnewsletter.com/