Edmund GRIMLEY EVANS <[EMAIL PROTECTED]> a tapoté : > Mathieu Roy <[EMAIL PROTECTED]>: > > > But to avoid any delicate issue in the future, if I were you, if would > > ask him to confirm with a gpg signed email the license change (just an > > email is something easy to fake). > > Getting him to sign the e-mail with his own key won't help much in the > case of him later claiming that the e-mail isn't genuine: he could at > any time "accidently" publish his secret key and revoke it; now anyone > can fake the e-mail. A better solution is to do everything in public > so that there are lots of witnesses. > > > In some countries, it's accepted as a valid proof of the origin of > > the email. > > A signature made with a secret key that was published on Usenet can > hardly be a valid proof of anything.
I do not remember me saying "a secret key published on Usenet". When did I say that? In some countries like in France it's truly accepted in court like a valid proof, you just have to follow some rules. I don't think the France is an exception in this matter. http://www.ssi.gouv.fr/fr/faq/faq_sigelec2.html#1 -- Mathieu Roy Homepage: http://yeupou.coleumes.org Not a native english speaker: http://stock.coleumes.org/doc.php?i=/misc-files/flawed-english