discussion on increasing amount of gpg signatures...
Douglas Elznic
dfe@anize.org
Sat Oct 13 22:53:02 2001
--=-4ftkP1WdsPlAZQxv3qKX
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
On Sat, 2001-10-13 at 14:55, Florian Weimer wrote:
> Evan Prodromou <evan@prodromou.san-francisco.ca.us> writes:
>=20
> >>>>>> "MA" =3D=3D Matt Armstrong <matt@lickey.com> writes:
> >
> > MA> Verifying that the key holder has control of the key's e-mail
> > MA> address isn't part of many key signing party verification
> > MA> procedures, especially less formal ones.
> >
> > This is extremely true. One way to ameliorate this is to use a
> > challenge-response pair for each e-mail address on the key.
>=20
> IIRC, the most obvious challenge-response protocol (and the most
> sensible one) for certifying keys has been patented, and I don't know
> if the extension to cover (multiple) email addresses is enough to
> bypass this patent. (Just in case if you want to do this more
> regularly.)
>
What is the patented challenge response protocol?
--=20
+------------------+---------------------------------------------------+
| Douglas Elznic | GPG Key: <dfe@anize.org> 0x13300731 |
+------------------+---------------------------------------------------+
| Thinker-@-Large | Pub key can be obtained from http://pgp.dtype.org |
| dfe@anize.org | Fingerprint: |
| dfelznic@syr.edu | EF9C 7E3C 0327 EAAF 1E20 5299 0805 7531 1330 0731 |
| http://anize.org | All emails should be signed by the above key. |
+----------------------------------------------------------------------+
| They that can give up essential liberty to obtain a little temporary |
| safety deserve neither liberty nor safety... Benjamin Franklin 1759 |
+----------------------------------------------------------------------+
--=-4ftkP1WdsPlAZQxv3qKX
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQA7yKrXCAV1MRMwBzERAm7hAJ9N/FaEudVxNcB0y0qGuPxp4TpAfgCfZK9q
F8EAEB0vGtUxSfeVFIZnVtU=
=Lyj0
-----END PGP SIGNATURE-----
--=-4ftkP1WdsPlAZQxv3qKX--