[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: GPG and Signing



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/01/07 10:29, Brad Rogers wrote:
> On Sun, 01 Apr 2007 10:05:07 -0500
> John Hasler <jhasler@debian.org> wrote:
> 
> Hello John,
> 
>> "ID" is a slippery concept.  What does it mean to "know who someone
>> is"?
> 
> Indeed.  However, with some sort of photo ID, such as passport of
> driving license, and knowledge of the relevant key fingerprint, it's
> possible to be fairly sure you're dealing with the person that created
> the public key.  So long as the details all match, whether that's their
> "real" ID is moot.

A couple of years ago there was a very long thread on what it means
to "trust".  The bottom line was that you can't perfectly know, and
that all you can do is "your best" at verifying his identity, and
then have faith.

- --
Ron Johnson, Jr.
Jefferson LA  USA

Give a man a fish, and he eats for a day.
Hit him with a fish, and he goes away for good!

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD4DBQFGD9WyS9HxQb37XmcRAp7JAJjy0yTrHIzyH2opQ9Ek9bShXpb/AJ9ZMQMW
3/uqnguJv2XcL/SeCVQ8Og==
=a+Fb
-----END PGP SIGNATURE-----



Reply to: