Abstract: In this article the authors present a trust management scheme, derived from the horizontal and almost anarchic web of trust model, but following a curatorship step that allows it to become a centerpiece for authentication in Debian, one of the largest and longest lived free software projects and producer of the eponymous GNU/Linux software distribution. This is done by analyzing the experience gained through a large-scale key migration process that spanned five years and nearly 100% of the originally existing keys, carried out attempting to minimize loss of keyring connectivity and strength, while keeping up to date with the best current security practices.
@article{doi:10.1080/01611194.2016.1238421,
author = {Gunnar E. Wolf and Gina Gallegos-García},
title = {Strengthening a curated web of trust in a geographically distributed project},
journal = {Cryptologia},
volume = {41},
number = {5},
pages = {459--475},
year = {2017},
publisher = {Taylor \& Francis},
doi = {10.1080/01611194.2016.1238421},
URL = {
https://doi.org/10.1080/01611194.2016.1238421
},
eprint = {
https://doi.org/10.1080/01611194.2016.1238421
}
}