| Darxus on Tue, 23 Apr 2002 23:30:24 +0200 |
|
On 04/23, Noah silva wrote: > lol, nor do I expect you to (nor do I sign most of these posts...) But if > you had grabbed my Public key from my web page (or another public > keyserver), and verified the signatures on my emails as coming from the > same ID, and then later sigs in newer emails failed validation, you would > know that either: > a.) I made a new Key, and the public key you have for me is out of date > or > b.) It isn't me. Nope, I wouldn't notice. I have gpg configured to automatically download any key I am attempting to verify the signature of if I don't already have it. I deal with a *lot* of keys, so this automation is very helpful for me. And the only thing I trust is signatures, not just whether or not I have a matching key. -- "Blessed are they who, in the face of death, think only about the front sight." http://www.ChaosReigns.com Attachment:
pgp13nTsjRSFD.pgp
|
|