Key server security considerations / Certification Authorities

Janusz A. Urbanowicz alex@FUCKUP.fantastyka.net
Sun Feb 18 21:05:08 2001



> Hello,
>
> how do I prevent someone else to create a key in my name and to send it to a
> key server to mislead third parties?
You can't.
> And is anyone aware of a Trust Center (Certification Authority) which would
> sign a GnuPG key created by me?
Thawte Computing (www.thawte.com) used to do this as a part of their Personal Web of Trust Certification System. Allegedly they stopped this service due to compatibility problems (their software choked on pure, GPG-generated OpenPGP keys, for instance), but I'll advise checking. Alex