authentication for hackage uploads

[Ross Paterson]

On Thu, Jan 04, 2007 at 12:52:36AM +0300, Bulat Ziganshin wrote:
> i think we can look at it from another side. how your committee van decide
> who is "good hacker" and who isn't? what is your criteria? for example, how
> you can decide is me good enough or not?

We just need to record names and email addresses for people who are
producing or maintaining Haskell code.  The recording needs to be done
manually to ensure the consistency and quality of the information, not the
individuals.  We can leave reputation judgements to the users of libraries
(and the build daemons), once it's clear who uploaded each package.
(Reputation is transitive in this case.)  We need a group of people
to do this recording, not to have votes or discussions, but because a
single person would be a chokepoint.