Robot CA at toehold.com

Jason Harris jharris@widomaker.com
Sun Dec 8 19:11:01 2002


--sdtB3X0nJg68CQEu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Dec 08, 2002 at 05:48:32PM +0100, Michael Nahrath wrote:
> Adrian 'Dagurashibanipal' von Bidder <avbidder@fortytwo.ch> schrieb am
> 2002-12-08 16:07 Uhr:

> Why should anybody sign Kyle's internet-service?
>=20
> At the moment only he can proove that it really is his program.
>=20
> If you want to build a trust path to his robot sign _his_ key and give fu=
ll
> ownertrust to Kyle's key!
>=20
> (or find another chain of ownertrusted signatures that leads to him.
> Maybe you already have one:
> <http://keyserver.kjsl.com/~jharris/gpgwww.cgi?from=3D92082481&to=3D2A94C=
484>)

Yes, that (pathfinder) path does exist.

I (0xD39DA0E3) signed Kyle's personal (0x2A94C484) and robot (0xC521097E)
keys with 0x11/persona signatures because I established that the keys
were linked to their specified email/web addresses.  The 0x072FAC89 <->
0xD39DA0E3 signatures came from an in-person keysigning.  I can't speak
for the other signers.

If anyone wants to see keyanalyze reports without PGP CA keys being
included, the first step is identifying them.  So far, I know about
Thawte Freemail (0x5AC41CB9, 0xDE46F54F, 0x6BE9A169, 0x066E6D90,
0x3CE4352F, 0xAD26F8E6, 0xFE77B6E1, 0x1811465A, 0x663D3B3F, 0x6F79AC0C,
0x86EE189C), ct magazine (0xB3B2A12C), and Robot CA (0xC521097E,
0x8A7C07CD).  trustcenter.de, DFN-PCA, and arcanus.com/arcanvs.com
are some others that spring to mind.  Some signatures from some of
these keys are backed up by in-person identity checks, though.

NB:  Watch your followups.

--=20
Jason Harris          | NIC:  JH329, PGP:  This _is_ PGP-signed, isn't it?
jharris@widomaker.com | web:  http://jharris.cjb.net/

--sdtB3X0nJg68CQEu
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE984uPSypIl9OdoOMRAiH8AJ4kqxeau7Aybsi0kmwu5iyNuTWD0ACgqDIJ
Xm8oNuy8iJoo4e2w/UzcsSk=
=nRJ0
-----END PGP SIGNATURE-----

--sdtB3X0nJg68CQEu--