> I used to think that the GPG web-of-trust verification in person was antiquated and no one would do it in practice. Which they don't. Debian developers authe

> I used to think that the GPG web-of-trust verification in person was antiquated and no one would do it in practice. Which they don't. Debian developers authenticate through a GPG web of trust. In fact, to become one, one requirement is obtaining two links from the existing DD web of trust.