Dave Turner on Thu, 12 Jul 2001 13:21:06 -0400


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] confirming my identity


Jeff Abrahamson wrote:
> 
> On Wed, Jul 11, 2001 at 02:38:05PM -0400, Darxus@chaosreigns.com wrote:
> > My public key, as you may have noticed, does not have any information on it
> > that can be confirmed by photo ID:
> >
> > pub  1024D/0E9FF879 2000-09-05 Darxus <Darxus@ChaosReigns.com>
> >      Key fingerprint = DE37 8846 3B06 B97C F661  D68F 7FB5 B0BE 0E9F F879
> > sub  1024g/2EEAB976 2000-09-05
> >
> >
> > It's been signed by a number of plug regulars who know, personally,
> > who I am.  If you don't, you may want to consider alternate methods of
> > verifying my identity, so you can sign my key.
> >
> > Like emailing me a password/phrase, so that only I (the person with the
> > email address darxus@chaosreigns.com) would know it, and so you could
> > know who me is.
> 
> But then how do I know that you didn't cleverly intercept the mail
> from the real darxus?
> 
> ;-)
> 
> --
>  Jeff
> 
>  Jeff Abrahamson  <http://www.purple.com/jeff/>

Because you encrypted the message using his public key, and you brought
with you the fingerprint of the key you encrypted with.  So, the person
you meet at the meeting has the same keys as the person who has the
e-mail address.

-- 
-[Dave Turner                              Stalk me:  (215)-545-2859]
---------------------------------------------------------------------
<zzorn-work-3> Interesting case: A goldfish swimming in a fishtank, 
that is carried on the back of a dragon



______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug