Signing people with only one form of ID?

[Richard Hartmann]

On Thu, Feb 28, 2008 at 4:09 AM, David Shaw <dshaw at jabberwocky.com> wrote:


>  Some people include a policy URL in the certification to tell a
>  recipient just what was done.  This has its own advantages and
>  disadvantages, but is really a comment as well, as no program parses
>  and acts on the information.

5.2.3.13. and 5.2.3.20. of RFC 4880 look very promising. Even if no
one else cares about them, I will probably try and implement them.

>  The bottom line is that you can sign with a signature level if you
>  like, but (barring persona signatures) it only makes a marginal
>  difference in practice.

While that is a problem, you can do your best to make the local
situation the best you can possibly make it.


Richard