Photo-ID: questions

[Ruediger Kupper]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Atom 'Smasher' wrote:

| one could also scan in their social security card, drivers
license, work
| id, etc...

The difference is that these documents are produced by a (hopefully)
trusted manufacturer (the "Bundesdruckerei" for German ID cards),
are certified by a (hopefully) trusted authority (my home city's
registry office), and are designed to be (hopefully) non-forgeable.
Public OpenPGP keys on the other hand can just be produced ,
certified and issued by anyone.
There IS a difference, and this is exactly the problem: people
making no distinction between a photo on an ID card and a photo in
an OpenPGP key.

| when signing keys, the important thing is that one has verified the
| fingerprint(s) through secure channels... secure channels could mean
| meeting for hot/cold beverages, a phone call between two (or more)
people
| who recognize each others voices, etc.

Exactly.

| i don't use a GUI for any gpg/pgp interaction,

Noticed that you can specify a picture viewer in the conf file? Or
don't you use graphics without interfaces either?

| so you could include a
| picture of your dog and it wouldn't mean anything to me.

I will have to think about it ;-)

Thanks!

Rüdiger
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32)
Comment: My key is available at 
https://neuro.physik.uni-marburg.de/~kupper

iD8DBQFAN8JyArljR8IwM1gRAnGsAJ9vcbgqjD4T6FCu5YESjJaUxwqpQQCeJkQX
y1MZWiEZHosUTv3emDncENI=
=I+ws
-----END PGP SIGNATURE-----