[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: GPG and Signing



On Sun, Apr 01, 2007 at 07:19:40PM +0300, Andrei Popescu wrote:
> Jose Luis Rivas Contreras <ghostbar38@gmail.com> wrote:
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > Andrei Popescu escribió:
> > > Ron Johnson <ron.l.johnson@cox.net> wrote:
> > > 
> > >>> What are the advantages to having it?
> > >> Using a web of trust, you can validate whether the entity that
> > >> claims to have sent the email actually sent the email.
> > > 
> > > Which makes me wonder, how is anyone to establish such a web of
> > > trust in this community?
> > 
> > There're KSP (Keysigning party) where ID's are checked and keys are
> > signed for another keys, that raises the web of trust.
> 
> This is the theory ;) But how can I, in Romania, get my key signed by
> at least one of the regular users of this list? I'll have a look to see
> if there are any DDs from Romania or at least Vienna. I can imagine the
> web is well established between the DDs.
As I said, you can use various means to verify info 'from email',
something out-of-band: phone call, video conference, snail mail, skype,
sms,... As long as its not 'just email'. At least, that's what I
understand.


-- 
|  .''`.  == Debian GNU/Linux == |       my web site:           |
| : :' :      The  Universal     |mysite.verizon.net/kevin.mark/|
| `. `'      Operating System    | go to counter.li.org and     |
|   `-    http://www.debian.org/ |    be counted! #238656       |
|  my keyserver: subkeys.pgp.net |     my NPO: cfsg.org         |
|join the new debian-community.org to help Debian!              |
|_______  Unless I ask to be CCd, assume I am subscribed _______|

Attachment: signature.asc
Description: Digital signature


Reply to: