Hi Chris, On Mon, Aug 16, 2010 at 02:37:37PM -0400, Chris Knadle wrote:
Another aspect that is troublesome are PhotoIDs in keys; several people had them. In order to go view the PhotoIDs I opened Kleopatra in KDE4 (4.4.5 in Sid), and when viewing a key it says this:"At the moment, Kleopatra does not support photos in certificates. It has no support for adding, nor for displaying them. This is for the following reasons: - Photos give a false sense of security. - Photos increase the size of certificates." I don't agree with the latter reason, as I think this should be a personal choice and I don't think PhotoIDs are "wrong", and I'm annoyed that such a choice is being made for me by the author of the tool rather than simply giving a warning. However as I couldn't find a way of displaying the PhotoIDs to verify them, I also couldn't sign them. :-/ I'd appreciate other people's opinions on PhotoIDs, as I don't have any strong feelings about them one way or the other.
Through my signature, I declare my trust in a digital GPG identity being tied to one or more "fullname and email address" pairs.
Most often the main tools to build that trust is a) some photo ID which I try to have trust in the validity of, and b) the physical presence of the person claiming to own the digital identy, the name, the email address(es) and the photo ID.
I like to be able to also tie digital identity to an image of that person.
I am not sure at all if improves the web of trust to sign jpeg images, but I do know that it improves the usefulnes of my personal collection of signed identities:
When I later exchange emails with someone signing their message, I can verify not only that it is "someone in my web of trust" but also *who* it is.
I am much better at recalling personality and past social interactions from a face than from the name of someone.
- Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private
signature.asc
Description: Digital signature
_______________________________________________ Debconf-discuss mailing list Debconf-discuss@lists.debconf.org http://lists.debconf.org/mailman/listinfo/debconf-discuss
