From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTPS id A0A628A6 for ; Wed, 3 Aug 2016 10:00:05 +0000 (UTC) Received: from mx2.suse.de (mx2.suse.de [195.135.220.15]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id 2D07CCD for ; Wed, 3 Aug 2016 10:00:05 +0000 (UTC) Date: Wed, 3 Aug 2016 12:00:02 +0200 (CEST) From: Jiri Kosina To: Linus Walleij In-Reply-To: Message-ID: References: <20150804152622.GY30479@wotan.suse.de> <1468612258.5335.0.camel@linux.vnet.ibm.com> <1468612671.5335.5.camel@linux.vnet.ibm.com> <20160716005213.GL30372@sirena.org.uk> <1469544138.120686.327.camel@infradead.org> <20160727140406.GP4541@io.lakedaemon.net> <1470147214.2485.8.camel@HansenPartnership.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: James Bottomley , Jason Cooper , "ksummit-discuss@lists.linuxfoundation.org" , Mark Brown Subject: Re: [Ksummit-discuss] [TECH TOPIC] Signature management - keys, modules, firmware, was: Last minute nominations: mcgrof and toshi List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Wed, 3 Aug 2016, Linus Walleij wrote: > I would trust an Intel WiFi driver if it was signed by Dirk Hohndel or > H. Peter Anvin whose GPG keys I have in my own web of trust and work for > Intel. Dirk no more :p > And this is simply because I trust these guys more than the corporate > entity they work for. But I fail to see the reasoning here. You implicitly have to trust the corporate entity anyway, because you are using the hardware they supplied to you. And that hardware certainly didn't go through hpa or Dirk either. -- Jiri Kosina SUSE Labs