[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: PGP and verifying ids / emails (fwd)



On Tue, 27 Jul 1999, Jor-el wrote:

> 	3.  As I pointed out in my email, if the developer in question
> wasnt sure that the email id of Jor-el belonged to me, then he wouldnt be
> able to sign the following id too : "Bob Smith" <jorel@ibm.net>. This is
> so ridiculous, becuase it is perfectly valid for a person named Bob Smith
> to own an id called jorel@ibm.net .

   I know your real name is Kenneth Stephen, and I know you use the email
address ksteph1@ibm.net (You handed me this address on a piece of paper
with your fingerprint).  Therefore, I can sign this ID.  I signed the ID
on your key, This is IMPORTANT, for the same reason that You signed your
own ID on your public key, to prevent Tampering.  Your key has your
signature and my signature against your ID.  
   If you wanted to add your jorel id to your key, you could do that and
sign it, but I cannot sign it.  I would have to trust you that you are in
fact jorel, which you I don't believe could prove to me other that giving
me your word, which doesn't cut it.  
   From your past few emails, I believe the only reason you care about
this is that you are using Separate email address to sort your mail.  If
this the case, i suggest you install procmail and learn to use it, or use
a better mail program.  This problem has been solved before.
   
   Adam



Reply to: