[tor-bugs] #5260 [Company]: Make ldap account for marlowe

[Tor Bug Tracker & Wiki]

#5260: Make ldap account for marlowe
---------------------+------------------------------------------------------
 Reporter:  marlowe  |          Owner:  weasel
     Type:  task     |         Status:  new   
 Priority:  normal   |      Milestone:        
Component:  Company  |        Version:        
 Keywords:           |         Parent:        
   Points:           |   Actualpoints:        
---------------------+------------------------------------------------------

Comment(by mikeperry):

 Replying to [comment:5 runa]:
 > Replying to [comment:1 arma]:
 > > I agree that we should, but: this key is signed only by marlowe? Do
 you know anybody near you that we know that you could get to sign it?
 >
 > I have met marlowe before, he has my phone number, and I will be able to
 recognize his voice if he calls to verify the fingerprint of his public
 key. Will this be sufficient?

 That works for me, though technically you should sign something that says
 his fingerprint is the same as the above. If you just comment here without
 a signature, we're just relying on trac security...

 But my comment about reproducible builds still stands. No matter how many
 people have smelled marlowe, his build machines could still get
 compromised.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5260#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online