lkml.org 
[lkml]   [2011]   [Oct]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: kernel.org status: establishing a PGP web of trust
    Date
    Mark Brown <broonie@opensource.wolfsonmicro.com> writes:

    > A common approach to this for at least the e-mail portion of the address
    > is to sign the ID with the address and then mail the signed key
    > encrypted to the address, deleting all local copies and requiring that
    > the recipient publish the signature. This at least demonstrates that
    > the owner of the key can read mail at that address.

    The assumption here is the attacker can read (and write) victim's email.
    It's not about verifying email access or address.
    --
    Krzysztof Halasa


    \
     
     \ /
      Last update: 2011-10-06 19:47    [W:0.021 / U:1.224 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site