🐧 Linux explores new way of authenticating developers

"Linux ID is built around decentralized identifiers (DIDs). This is a W3C‑style mechanism for creating globally unique IDs and attaching public keys and service endpoints to them. Developers create DIDs, potentially using existing Curve25519‑based keys from today's PGP world, and publish DID documents via secure channels such as HTTPS‑based "did:web" endpoints that expose their public key infrastructure and where to send encrypted messages"

"On top of that, the project uses a decentralized messaging fabric that can be REST, DIDComm, or another trust‑spanning protocol. This enables participants to establish relationships and exchange credentials without revealing their physical location or network topology. Each relationship uses its own random, ephemeral DIDs, making it far harder for observers running messaging infrastructure to infer who is talking to whom or to map the kernel's social graph"
Linux explores new way of authenticating developers and their code - here's how it works

Linux kernel maintainers propose a less painful process for identifying developers. See how it can make Linux code safer than ever.

ZDNET

@jbz

Sounds very complex to me. They want to replace meeting people face-to-face with something else that to me is complex and error prone.

#linux #kernel #auth #opensource