From owner-freebsd-security@FreeBSD.ORG  Mon Nov 28 11:37:57 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F084216A41F
	for <freebsd-security@freebsd.org>;
	Mon, 28 Nov 2005 11:37:57 +0000 (GMT)
	(envelope-from listuser@seifried.org)
Received: from mail.seifried.org (ip-216-234-189-11.tera-byte.com
	[216.234.189.11])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 119CE43D5F
	for <freebsd-security@freebsd.org>;
	Mon, 28 Nov 2005 11:37:56 +0000 (GMT)
	(envelope-from listuser@seifried.org)
Received: by mail.seifried.org (Postfix, from userid 91)
	id 5FD4E6E0328; Mon, 28 Nov 2005 04:30:27 -0700 (MST)
Received: from pooptop (unknown [68.149.166.57])
	by mail.seifried.org (Postfix) with ESMTP id 0DBB56E0321
	for <freebsd-security@freebsd.org>;
	Mon, 28 Nov 2005 04:30:25 -0700 (MST)
Message-ID: <000e01c5f410$2de67820$1300110a@pooptop>
From: "Kurt Seifried" <listuser@seifried.org>
To: <freebsd-security@freebsd.org>
References: <20051126224530.GD27757@cirb503493.alcatel.com.au><4389D072.2030502@iang.org>
	<20051127182116.GA30426@cirb503493.alcatel.com.au>
Date: Mon, 28 Nov 2005 04:37:57 -0700
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="iso-8859-1";
	reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2670
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on srv05.seifried.org
X-Spam-Level: 
X-Spam-Status: No, score=0.1 required=3.0 tests=RCVD_IN_SORBS_DUL 
	autolearn=no version=3.0.4
Subject: Re: Reflections on Trusting Trust
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Kurt Seifried <listuser@seifried.org>
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Nov 2005 11:37:58 -0000

One interesting note, I downloaded the PGP key for the freebsd security 
officer from freebsd.org just now, then tried to download all the signing 
keys, only 3 were available on PGP's key server. You should have people 
upload their keys. On another note I am available to sign PGP keys (proving 
your key/identity is an excercise left to the reader =), I have had mine 
signed by the Mandrake (now Mandriva) security key which is widely available 
(on cd/etc) for verification.


Kurt