discussion on increasing amount of gpg signatures...

Douglas Elznic dfe@anize.org
Sat Oct 13 22:53:02 2001


--=-4ftkP1WdsPlAZQxv3qKX
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Sat, 2001-10-13 at 14:55, Florian Weimer wrote:

> Evan Prodromou <evan@prodromou.san-francisco.ca.us> writes:
>=20
> >>>>>> "MA" =3D=3D Matt Armstrong <matt@lickey.com> writes:
> >
> > MA> Verifying that the key holder has control of the key's e-mail
> > MA> address isn't part of many key signing party verification
> > MA> procedures, especially less formal ones.
> >
> > This is extremely true. One way to ameliorate this is to use a
> > challenge-response pair for each e-mail address on the key.
>=20
> IIRC, the most obvious challenge-response protocol (and the most
> sensible one) for certifying keys has been patented, and I don't know
> if the extension to cover (multiple) email addresses is enough to
> bypass this patent. (Just in case if you want to do this more
> regularly.)
>
What is the patented challenge response protocol? --=20 +------------------+---------------------------------------------------+
| Douglas Elznic | GPG Key: <dfe@anize.org> 0x13300731 |
+------------------+---------------------------------------------------+
| Thinker-@-Large | Pub key can be obtained from http://pgp.dtype.org |
| dfe@anize.org | Fingerprint: |
| dfelznic@syr.edu | EF9C 7E3C 0327 EAAF 1E20 5299 0805 7531 1330 0731 |
| http://anize.org | All emails should be signed by the above key. |
+----------------------------------------------------------------------+
| They that can give up essential liberty to obtain a little temporary |
| safety deserve neither liberty nor safety... Benjamin Franklin 1759 |
+----------------------------------------------------------------------+ --=-4ftkP1WdsPlAZQxv3qKX Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQA7yKrXCAV1MRMwBzERAm7hAJ9N/FaEudVxNcB0y0qGuPxp4TpAfgCfZK9q F8EAEB0vGtUxSfeVFIZnVtU= =Lyj0 -----END PGP SIGNATURE----- --=-4ftkP1WdsPlAZQxv3qKX--