Re: GPG and Signing
Brad Rogers writes:
> However, with some sort of photo ID, such as passport of driving license,
> and knowledge of the relevant key fingerprint, it's possible to be fairly
> sure you're dealing with the person that created the public key.
For many purposes (guaranteeing that bank account withdrawals can only be
made by the person who opened the account, for example) all you need to
know is that all the messages in a sequence came from the same person.
Only the public key is needed for that. Passports and such merely an
(unreliable) link to government record systems: irrelevant for most
purposes.
> So long as the details all match, whether that's their "real" ID is moot.
What is a "real ID"?
--
John Hasler
Reply to: