[tor-bugs] #5260 [Company]: Make ldap account for marlowe

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Wed Feb 29 08:01:22 UTC 2012


#5260: Make ldap account for marlowe
---------------------+------------------------------------------------------
 Reporter:  marlowe  |          Owner:  weasel
     Type:  task     |         Status:  new   
 Priority:  normal   |      Milestone:        
Component:  Company  |        Version:        
 Keywords:           |         Parent:        
   Points:           |   Actualpoints:        
---------------------+------------------------------------------------------

Comment(by mikeperry):

 arma must be testing if I'm watching the bugs list... I do have concerns
 about giving ldap accounts to every random person, but requiring that some
 random friend of a friend meet them in person is not the right bar, imo..

 What is the concern here? What risks do we incur by giving an owner of a
 gpg key some level of access to our infrastructure? How many of these
 risks still exist if we simply make sure that the owner of this gpg key is
 actually the same person who volunteered to make rpms for us?

 I'm not saying there is no risk... I'm just wondering what problems we're
 trying to solve by requiring an arbitrary person to meet someone else in
 person.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5260#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list