On Thursday 03 November 2005 15:17, Jarrod Major wrote:
> This is just a reminder, for those using GPG, make sure you sign the public
> keys of those people in your keyring. 

only if you are certain that the key is valid. this usually means having the 
person show you photo ID and giving you a hardcopy version of their key 
fingerprint for confirmation.

randomly signing keys actually degrades the value of the web of trust.

-- 
Aaron J. Seigo
GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA  EE75 D6B7 2EB1 A7F1 DB43

Full time KDE developer sponsored by Trolltech (http://www.trolltech.com)

Attachment: pgpJbClphyrcR.pgp
Description: PGP signature

_______________________________________________
clug-talk mailing list
[email protected]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying

Reply via email to