Robot CA at toehold.com
Jason Harris
jharris@widomaker.com
Sun Dec 8 19:11:01 2002
--sdtB3X0nJg68CQEu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sun, Dec 08, 2002 at 05:48:32PM +0100, Michael Nahrath wrote:
> Adrian 'Dagurashibanipal' von Bidder <avbidder@fortytwo.ch> schrieb am
> 2002-12-08 16:07 Uhr:
> Why should anybody sign Kyle's internet-service?
>=20
> At the moment only he can proove that it really is his program.
>=20
> If you want to build a trust path to his robot sign _his_ key and give fu=
ll
> ownertrust to Kyle's key!
>=20
> (or find another chain of ownertrusted signatures that leads to him.
> Maybe you already have one:
> <http://keyserver.kjsl.com/~jharris/gpgwww.cgi?from=3D92082481&to=3D2A94C=
484>)
Yes, that (pathfinder) path does exist.
I (0xD39DA0E3) signed Kyle's personal (0x2A94C484) and robot (0xC521097E)
keys with 0x11/persona signatures because I established that the keys
were linked to their specified email/web addresses. The 0x072FAC89 <->
0xD39DA0E3 signatures came from an in-person keysigning. I can't speak
for the other signers.
If anyone wants to see keyanalyze reports without PGP CA keys being
included, the first step is identifying them. So far, I know about
Thawte Freemail (0x5AC41CB9, 0xDE46F54F, 0x6BE9A169, 0x066E6D90,
0x3CE4352F, 0xAD26F8E6, 0xFE77B6E1, 0x1811465A, 0x663D3B3F, 0x6F79AC0C,
0x86EE189C), ct magazine (0xB3B2A12C), and Robot CA (0xC521097E,
0x8A7C07CD). trustcenter.de, DFN-PCA, and arcanus.com/arcanvs.com
are some others that spring to mind. Some signatures from some of
these keys are backed up by in-person identity checks, though.
NB: Watch your followups.
--=20
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
jharris@widomaker.com | web: http://jharris.cjb.net/
--sdtB3X0nJg68CQEu
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)
iD8DBQE984uPSypIl9OdoOMRAiH8AJ4kqxeau7Aybsi0kmwu5iyNuTWD0ACgqDIJ
Xm8oNuy8iJoo4e2w/UzcsSk=
=nRJ0
-----END PGP SIGNATURE-----
--sdtB3X0nJg68CQEu--