Unterhaltung
Nachrichten
-
@bobjonkman @lnxw37 And the identity of persons' fathers depends on the statement of their mothers. Generally speaking. Not totally reliable
-
A #keysigning isn't to establish paternity or create a genealogy (so no gov't ID or blood tests needed), it merely associates a GnuPG/PGP key with an identity. The identity doesn't have to be a #RealName; if we were to meet at a keysigning party and you introduced yourself as @inscius I'd accept that as your "identity", but for me to sign your key I might want to know you a bit longer than that. It's more important to me to know that I'm communicating with the same person every time rather than knowing the name under which you file your taxes.
-
@bobjonkman I agree in general. I am not going to wave around my ID at a cryptoparty with people I have no previous connection with.
-
@inscius I do that (showing people my ID for keysigning), but mainly because there are enough public records that I’m going there anyway (for example notes here)
-
@drak If I was a more public figure I might do that. But I only use key for private mail (not .e.g for signing packages), and i dont ....
-
@drak ... share my mail address either.
-
Then you do not need an ID, yes. But if you want others to encrypt when sending to your email address, you should allow them to verify that the person they are talking to controls the email address (⇒ have the email on the slip of paper with your GPG-signature).
-
@drak I agree in principle. Otoh, can I not send an encrypted mail to someone I do not ultimately trust?
-
@inscius or rather recieve. (It is still morning.. :)
-
@inscius you can send an receive encrypted emails to and from people you do not trust. You then just won’t know whether you got man-in-the-middled.
-