[Announce] new gnupg snapshot
Florian Weimer
fw@deneb.enyo.de
Sat Apr 7 22:39:04 2001
Frank Tobin <ftobin@uiuc.edu> writes:
> Florian Weimer, at 22:27 +0200 on 7 Apr 2001, wrote:
>
> > They have talked about why importing trust is bad, but importing trust !=
> > importing a secret key.
>
> Not with GnuPG. Importing a secret key implies importing trust.
>
> Umm...then maybe _this_ is our problem?
Maybe.
> Why are the two being considered together at all?
IIRC it's planned for GnuPG 1.1, but the change was considered too
grave for 1.0.x.
> Trust is something that is maintained separately in GnuPG, no?
Yes and no. At the moment, ultimate trust is tied to secret keys
tightly. Other trust parameters can be freely set by the user.