[eclm] PGP/GPG key signing

Hannes Mehnert hannes at mehnert.org
Thu Oct 20 19:29:20 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384

Hi,

although I won't be at ECLM, please consider what you actually want to
use the keys for before choosing the verification method.

Or, to phrase it differently:
 Why should I care about an ID when I sign a key which I use primarily
for email?
 -> thus verify that the person can read the mailboxes of the mail
    addresses you are about sign, not some governmental identification.

More elaborate
http://blog.ngas.ch/archives/2008/11/29/trust_based_pgp_key_signing/index.html


Have a lot of fun,

Hannes
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (Darwin)
Comment: GPGTools - http://gpgtools.org

iEYEAREJAAYFAk6gdpAACgkQRcuNlziBjRxxJgCfWYRCESkOTB96rSdGRMBiCx3K
k/4AoJV7ZNTcIpP6vFhz9903+3Nuo96t
=WETD
-----END PGP SIGNATURE-----




More information about the eclm mailing list