Re: GPG and Signing

[Celejar <celejar@gmail.com>]

On Sun, 1 Apr 2007 19:19:40 +0300
Andrei Popescu <andreimpopescu@gmail.com> wrote:

> Jose Luis Rivas Contreras <ghostbar38@gmail.com> wrote:
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > Andrei Popescu escribió:
> > > Ron Johnson <ron.l.johnson@cox.net> wrote:
> > > 
> > >>> What are the advantages to having it?
> > >> Using a web of trust, you can validate whether the entity that
> > >> claims to have sent the email actually sent the email.
> > > 
> > > Which makes me wonder, how is anyone to establish such a web of
> > > trust in this community?
> > 
> > There're KSP (Keysigning party) where ID's are checked and keys are
> > signed for another keys, that raises the web of trust.
> 
> This is the theory ;) But how can I, in Romania, get my key signed by
> at least one of the regular users of this list? I'll have a look to see
> if there are any DDs from Romania or at least Vienna. I can imagine the
> web is well established between the DDs.
> 
> Regards,
> Andrei

IIUC, the web of trust is (somewhat) transitive; you don't need direct
access to a d-u user or DD, as long as there's some sort of linkage
(think six degrees of separation) between you.

Celejar