[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #5260 [Company]: Make ldap account for marlowe
#5260: Make ldap account for marlowe
---------------------+------------------------------------------------------
Reporter: marlowe | Owner: weasel
Type: task | Status: new
Priority: normal | Milestone:
Component: Company | Version:
Keywords: | Parent:
Points: | Actualpoints:
---------------------+------------------------------------------------------
Comment(by mikeperry):
arma must be testing if I'm watching the bugs list... I do have concerns
about giving ldap accounts to every random person, but requiring that some
random friend of a friend meet them in person is not the right bar, imo..
What is the concern here? What risks do we incur by giving an owner of a
gpg key some level of access to our infrastructure? How many of these
risks still exist if we simply make sure that the owner of this gpg key is
actually the same person who volunteered to make rpms for us?
I'm not saying there is no risk... I'm just wondering what problems we're
trying to solve by requiring an arbitrary person to meet someone else in
person.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5260#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs