Re: reflecting on PGP, keyservers, and the Web of Trust

[David Honig]

At 05:33 PM 9/3/00 -0400, Dan Geer wrote:
>
>>   How do they exchange public keys?  Via email I'll bet.
>
>Note that it is trivial(*) to construct a self-decrypting
>archive and mail it in the form of an attachment.  The
>recipient will merely have to know the passphrase.  If

If you have a secure channel to exchange a passphrase in,
you have no need for PK.