Re: About PGP Signing a File.



On Mon, 2007-02-12 at 22:13 -0800, John L Fjellstad wrote:
Ouattara Oumar Aziz <wattazoum@xxxxxxxxx> writes:

That's why, when I see some people on some mailing list signing there
mail using PGP I just wonder what they want to prove. We have no way to
check the authority behind that key.

Authority has nothing to do with (unless you know the person). But you
can be sure that the person who claims he wrote an email yesterday is
the same person who wrote the email today if the signature match.

Correction: *reasonably sure*

It's entirely possible that the guy's keys were stolen in the
intervening night.


--
John L. Fjellstad
web: http://www.fjellstad.org/ Quis custodiet ipsos custodes


--
Michael R. Head <burner@xxxxxxxxxxxxxxxxxxx>
http://www.suppressingfire.org/~burner/
http://suppressingfire.livejournal.com

Attachment: smime.p7s
Description: S/MIME cryptographic signature

--
ubuntu-users mailing list
ubuntu-users@xxxxxxxxxxxxxxxx
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users


Relevant Pages

  • Re: About PGP Signing a File.
    ... mail using PGP I just wonder what they want to prove. ... Authority has nothing to do with. ... can be sure that the person who claims he wrote an email yesterday is ... but that's what revocation certificates ...
    (Ubuntu)
  • Re: About PGP Signing a File.
    ... Michael R. Head wrote: ... mail using PGP I just wonder what they want to prove. ... Authority has nothing to do with. ... can be sure that the person who claims he wrote an email yesterday is ...
    (Ubuntu)
  • Re: About PGP Signing a File.
    ... Ouattara Oumar Aziz writes: ... mail using PGP I just wonder what they want to prove. ... Authority has nothing to do with. ... can be sure that the person who claims he wrote an email yesterday is ...
    (Ubuntu)
  • Re: Secure email solution
    ... > without using a public key. ... > watch by a third party Certificate of Authority rather than just me trusting ... > Certificate of Authority? ... PGP does this. ...
    (alt.computer.security)
  • Re: About PGP Signing a File.
    ... there mail using PGP I just wonder what they want to prove. ... Authority has nothing to do with. ... If your keys have been compromised a revocation certificate is mostly ... All security mechanisms are vulnerable if you lose the secret. ...
    (Ubuntu)