> However, by signing an ID, or the email, I have demonstrated > that I do infact, possess that private key. Well indeed, but I'd expect to get a gpg-signed mail from my applicant as part of step 2, and I could then check the signature. Matthew -- Rapun.sel - outermost outpost of the Pick Empire http://www.pick.ucam.org