[ogb-discuss] [security-discuss] contributor grants for crypto project team members

[Stephen Lau]

KeithMWesolowski wrote:
> The use of Contributor status as an access control is contrary to
> constitutional intent: it's supposed to be an effect of, not a
> prerequisite to, one's contributions.  That said, since no one else
> has volunteered to work on federated identity management or even
> enhancements to the code review tool to make it more widely
> accessible, I don't think it's fair to complain about what we have now
> - without Dan's efforts, we'd have nothing at all.

The ssh key authentication is some form of identity management though 
perhaps not as useful for webapps.  Alan Burlison on website-discuss is 
architecting a federated identity/single sign on/authentication scheme 
for opensolaris.org

cheers,
steve

-- 
stephen lau // stevel at sun.com | 650.786.0845 | http://whacked.net
opensolaris // solaris kernel development