Strengthening a curated web of trust in a geographically distributed project. Issue 5 (3rd September 2017)

• Record Type: Journal Article
• Authors: Wolf, Gunnar E.; Gallegos-García, Gina
• Is Part Of: Cryptologia. Volume 41:Issue 5(2017)
• Page Start: 459
• Page End: 475
• Publication Date: 2017-09-03
• Subjects: Key length -- PGP -- trust models -- web of Trust; Cryptography -- Periodicals; 652.8
• DOI: 10.1080/01611194.2016.1238421
• Languages: English
• ISSNs: 0161-1194

Abstract

ABSTRACT: In this article the authors present a trust management scheme, derived from the horizontal and almost anarchic web of trust model, but following a curatorship step that allows it to become a centerpiece for authentication in Debian, one of the largest and longest lived free software projects and producer of the eponymous GNU/Linux software distribution. This is done by analyzing the experience gained through a large-scale key migration process that spanned five years and nearly 100% of the originally existing keys, carried out attempting to minimize loss of keyring connectivity and strength, while keeping up to date with the best current security practices.