[lkml]   [2011]   [Oct]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: status: establishing a PGP web of trust
    Date wrote:

    > [...]
    >> You probably know enough people (including myself) that would be willing
    >> to sign your key over the phone.
    > You have personally checked Rafael's user id (e.g. passport)?
    > This might or might not be true in this case, but generally signing keys
    > without having ever checked the user id (no matter how long you know the
    > person) is a common mistake.

    What is the threat that this passport checking is intended to cure?
    That someone else might have been impersonating Rafael for years,
    sending patches, chatting in email and over the phone, and attending
    conferences? If so, perhaps the impostor is of more value to the
    project than the Real Rafael.

    - FChE

     \ /
      Last update: 2011-10-03 18:31    [W:0.020 / U:6.024 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site