[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Please revoke your signatures from Martin Kraff's keys

On Sat, May 27, 2006 at 04:47:20PM -0500, martin f krafft wrote:
> Dear Manoj, dear fellow DDs,

Hi, I'm just going to address the question you made that was directed to me.

> also sprach Javier Fernández-Sanguino Peña <jfs@computer.org> [2006.05.25.1300 -0500]:
> > FWIW, I noted down those keys I would *not* sign and didn't tell
> > the people at the KSP that I would not sign them. I guess his
> > experiment "only one in ten said that they would *not* sign it" is
> > moot unless he backs it up with the signatures he eventually got
> > sent from those he showed a wrong ID to.
> Out of curiosity, did you mark my key to be "questionable"?

Yes. But then again, you have to trust that I did since you cannot 
see the (2) I added next to your name and the ID check :-)
(on a scale of 1-5 with 5 being the highest). You got a (2) (and
not a (1) like others did) not because of your ID but because we actually
talked throughout the Debconf.

> The point you raise is a valid one. However, given how many people
> just don't sign keys after keysignings, the data would be skewed in
> the other direction.

True. But skew is always present in lies^statistics :-)

> I do not yet understand why some people do not confront those with
> questionable IDs. Maybe you can shine some light on that.

For two reasons:

1.- People might not have a better ID (I guess I trust people to bring
    their best ID to the KSP) and that means that: 
      a) they will be ashamed that they cannot provide a better ID
      b) they will be offended that I don't trust their national ID
      c) they will not understand why I'm asking for a better ID

2.- Lack of time and peer pressure ("you are taking too long!")

The only case in which I would bother explaining is 1-b, but with 2) taken
into account I did not had time to explain why their ID was not sufficient
for me. And I can actually do that (with a canned e-mail) after the KSP.

Hope that explains it.


Attachment: signature.asc
Description: Digital signature

Reply to: