Third party information (was: Semi-automated trust, policy)

[David Shaw]

On Tue, Dec 10, 2002 at 08:12:14AM +0100, Huels, Ralf SCORE wrote:

> So, I met this person, am sufficiently convinced of his 
> identity, he has claimed ownership of a well-signed key
> and I still didn't sign it because he didn't list the
> fingerprint in his claim of ownership.
> 
> Am I being overly paranoid? (Apart from the fact that this 
> might serve as a lesson to take more care when preparing 
> for a key signing ;-)

For what it's worth, the same exact thing happened to me, and I also
declined to sign the key in question.

David

-- 
   David Shaw  |  dshaw@jabberwocky.com  |  WWW http://www.jabberwocky.com/
+---------------------------------------------------------------------------+
   "There are two major products that come out of Berkeley: LSD and UNIX.
      We don't believe this to be a coincidence." - Jeremy S. Anderson