Robots in the WoT

Adrian 'Dagurashibanipal' von Bidder avbidder@fortytwo.ch
Wed Jun 25 19:37:03 2003


--Boundary-02=_v4d++9nCjXyg6gM
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Description: signed data
Content-Disposition: inline

On Wednesday 25 June 2003 16:02, Greg Sabino Mullane wrote:
> Blah. This is what I was afraid would happen someday:
=2E..
> 0x8A7C07CD (Robot CA <robotca@toehold.com>) signs
=2E..

So?

While I like the idea of the global WoT and I like the keyanalize ranking, =
it=20
is really just a game and doesn't have anything to do with trust management=
=2E=20
Actual use of gpg for private communication requires a personal decision wh=
om=20
to trust - so, if you want to remove the robotCA key from your personal WoT=
,=20
there's nobody telling you not to.

As with all complex systems, it is important to constantly remind oneself w=
hat=20
are the tools and what is their purpose. The RobotCA is a tool to establish=
=20
that a person who has access to some email address also has access to the=20
secret key with this email address in the uid. It doesn't try to establish=
=20
the identity of that person - and it doesn't claim that it does.

cheers
=2D- vbi


=2D-=20
Available for key signing in Z=C3=BCrich and Basel, Switzerland
                     (what's this? Look at http://fortytwo.ch/gpg/intro)

--Boundary-02=_v4d++9nCjXyg6gM
Content-Type: application/pgp-signature
Content-Description: signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iKcEABECAGcFAj753i9gGmh0dHA6Ly9mb3J0eXR3by5jaC9sZWdhbC9ncGcvZW1h
aWwuMjAwMjA4MjI/dmVyc2lvbj0xLjUmbWQ1c3VtPTVkZmY4NjhkMTE4NDMyNzYw
NzFiMjVlYjcwMDZkYTNlAAoJEIukMYvlp/fWiz4An1u9bdVdPGFq7e8hps4HF0sm
Mz4sAKCYFC1UJk3qHZ03gOM/SJiX8TCv0Q==
=zc9W
-----END PGP SIGNATURE-----
Signature policy: http://fortytwo.ch/legal/gpg/email.20020822?version=1.5&md5sum=5dff868d11843276071b25eb7006da3e

--Boundary-02=_v4d++9nCjXyg6gM--