From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757705AbcASVPh (ORCPT ); Tue, 19 Jan 2016 16:15:37 -0500 Received: from dcvr.yhbt.net ([64.71.152.64]:60717 "EHLO dcvr.yhbt.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753224AbcASVPe (ORCPT ); Tue, 19 Jan 2016 16:15:34 -0500 X-Greylist: delayed 586 seconds by postgrey-1.27 at vger.kernel.org; Tue, 19 Jan 2016 16:15:34 EST Date: Tue, 19 Jan 2016 21:05:47 +0000 From: Eric Wong To: Andrey Utkin Cc: Jeff King , linux-kernel@vger.kernel.org, git@vger.kernel.org Subject: Re: Don't use PGP/GPG signatures in mail that contains patches Message-ID: <20160119210547.GA2822@dcvr.yhbt.net> References: <569C3F73.3090805@pb.com> <20160118214857.GA24136@sigill.intra.peff.net> <569E2398.2050206@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <569E2398.2050206@gmail.com> Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Andrey Utkin wrote: > But still, if we encourage signing maillist correspondence, we would > avoid impersonation attacks. Imagine that somebody sends stupid > submissions from your name, maintainers shout at you, and your > reputataion is... changed. Of course, you will be able to sort things > out after you read the replies and reply that it's not you. But, given > to openness of maillists, the attacker is able to follow your replies > and insert his ones. Or to reply to your valid submissions that they are > not from you. Is impersonation an actual problem on vger.kernel.org lists? Reply-to-all conventions on these lists do a great deal to discourage them.