Third party information (was: Semi-automated trust, policy)

David Shaw
Tue Dec 10 16:03:03 2002

On Tue, Dec 10, 2002 at 08:12:14AM +0100, Huels, Ralf SCORE wrote:

> So, I met this person, am sufficiently convinced of his 
> identity, he has claimed ownership of a well-signed key
> and I still didn't sign it because he didn't list the
> fingerprint in his claim of ownership.
> Am I being overly paranoid? (Apart from the fact that this 
> might serve as a lesson to take more care when preparing 
> for a key signing ;-)

For what it's worth, the same exact thing happened to me, and I also
declined to sign the key in question.


   David Shaw  |  |  WWW
   "There are two major products that come out of Berkeley: LSD and UNIX.
      We don't believe this to be a coincidence." - Jeremy S. Anderson