Some time ago I wrote a blog post asking the question “Who are you really?” It didn’t come to any real conclusion, it only expressed the fact that it was a topic I had been thinking about. I didn’t immediately stop thinking about it, but it drifted out of the forefront of my thoughts to the point that I still haven’t really got a good conclusion. But I have been reminded of the topic recently by an article on LWN about issues Debian is facing with key signing. Now the issues that Debian is facing very much reflect the issues I had that led to my previous blog post. How do you trust an identity? What value does that identity hold in itself, and what value can you ascribe to associated details.