Trusted Trac

(hey, isn't it a cool label?)

This is a draft about pushing Trac to a new level of confidence in user supplied data, witch may be especially valuable in commercial/cooperate setups. It is not so much about whole new code but clever integration of existing features of Trac or Trac plugins. In the end we can trust in user identities backed by one or several Webs of Trust (community-based PGP key chain, CAcert issued X.509 certificate, etc.) and may get i.e. near zero ticket and wiki SPAM without any SPAM filtering as a side-effect. Tight registration control, timed automatic deactivation of unverified user accounts and accounts with expired PGP key respectively certificate, all just a matter of choice.

Trusted Trac Notification

(put references on existing/upcoming implementations for Trac and ​wiki:AnnouncerPlugin/MessageEncryption here)

Registration/new user process

(add description along the lines of Carsten Klein's idea from 23-Jul-2010 on IRC channel #trac here)

Editor identity verification

(develop handshake models for checking any user input)

—hasienda