From: "Aleksi Niemelä" <aleksi.niemela@...>
Date: 2000-07-04T18:12:43+02:00
Subject: [ruby-talk:03800] Re: Ubiquitous Ruby

> > In terms of security, I agree there are issues here, but not
> > insurmountable ones. We'll need to involve crypto folks in this.
> 
> not neccessarily.  standard pgp-encryption would suffice, it's the
> "trusted source" which could be a problem, in the face of mirroring
> needs.

Well, this sounds nice! Ruby (community) would be the first providing, as an
add-on, a net (or was it called web) of trust. Few major characters and
sites build up their keys, exchange and verify (by phone or whatever is
considered to be secure enough) and here we go.

Every RPAN-member would have a choice to become a trusted member (conforming
some policy) and could introduce more trusted members.

Previously talked dynamic "require_newest 'cgi'" would automatically obtain
the lib (using web or whatever) and *check* it's original source and
integrity.

Mirrors would *know* and trust each other.

I'm sure this all isn't this simple, but anyway, the idea seems exciting.

	- Aleksi