Re: [PLUG] key-signing Thursday?

Michael Leone <turgon@mike-leone.com> · 17 Apr 2002 20:31:03 -0400

On Wed, 2002-04-17 at 20:22, pinkee@cavegirl.org wrote:
> On Wed, Apr 17, 2002 at 08:09:57PM -0400, Michael Leone wrote:
> > On Wed, 2002-04-17 at 19:40, gabriel rosenkoetter wrote:
> > > On Wed, Apr 17, 2002 at 06:39:31PM -0400, Michael Leone wrote:
> > > > All participants have to have copies of everyone involved's fingerprint;
> > > > it's just easier to funnel them to a central person, who then makes
> > > > enough printouts for all participants to look at.
> > > 
> > > Um, but if I blindly trust that the printout that Darxus gives me
> > > matches what I'd get out of gpg --fingerprint for that key ID and
> > > sign the key, I've misplaced my trust.
> > 
> > Why? Isn't that a sign that you trust Darxus? And you do, don't you,
> > since you've signed his key?
> 
> A) If it is someones first key signing, they *haven't* signed Darxus'
> key.
> B) As far as I know Darxus has the *least* trustworthy of the keys. He
> doesn't have id that says Darxus, and he doesn't have anything on his
> key that matches his id. The closest thing we have is his liscence
> plate. :)

And the fact that some of us met/knew him personally, well before we
ever got around to keysigning. An even better sort of trust, don't you
think? More so than someone you meet once at a meeting, examine a
license, sign a key, and never see that person again?

And there have been a few of those.

Granted, this doesn't apply to everybody, nor in every case. But it does
in mine, ar least.

> C) If someone sent Darxus a key that was invalid and you signed it cause
> it was on Darxus paper, you signed a bad key.
> 
> pinkee
> -- 
> www.cavegirl.org
> www.mydarlingchild.com
> "He's kind of shy, but thats the kind of girl I am, he's my kind of
> guy...I want to be haunted by the ghost of your precious love. ... And
> now I know I never ever want to be without you."
> Sinead O'Connor and The Pogues
-- 

PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF
PGP public key:
<http://www.mike-leone.com/~turgon/turgon-public-key.gpg>

Conform or be cast out.