[DorothySim]

> For example, IIRC NetBSD required new developers to meet with one or two existing developers in person to verify their identity. (Pretty much like a regular PGP WoT.)

Debian also requires OpenPGP keys and WoT for all developers.

[KirinDave]

What is WOT in this context? I thought Debian required that you register with them, not that there was some other trust threshold.