-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 22.05.15 17:51, Daniel Kahn Gillmor wrote:
> On Fri 2015-05-22 11:46:23 -0400, Patrick Brunschwig wrote:
>> Before the keys are actually imported is done, you get a list of
>> the keys that you are about to import (this is especially useful
>> for imports from files, as you don't know what's inside). I'd say
>> it's enough to display User ID, creation date, fingerprint, and
>> revocation status. The list should allow for each key to choose
>> how well you trust the owner of the key. My idea is something
>> simple that people understand like 1 star to 5 stars with some
>> explanation. E.g. - - 1 star = I don't know the owner of the key 
>> ... - - 5 stars = I'm very sure that the key is from the person
>> it it supposed to be and I know that person well.
>> 
>> Depending on the number of stars, the keys are automatically
>> signed and trusted with a specific type of answer.
>> 
>> Furthermore, it should be possible to "share" your "trust with
>> others. Sharing is nothing else but non-local signatures that are
>> uploaded to a keyserver.
> 
> What you describe above sounds good, except for the word "trust" --
> i think you're talking about validity, not ownertrust.  please
> let's not put the word "trust" into the UI here!

Fully agreed. We should really continue the discussion we started in
Frankfurt ...

> "I think this key is valid" or "I believe this key belongs to
> Mary"
> 
> I'm not sure we even need 5 stars, tbh.
> 
> We might just need a checkbox "I have verified that this key
> belongs to Mary", and another checkbox "Share publicly that I think
> this is Mary's key"

Yes indeed.

- -Patrick

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=+VGU
-----END PGP SIGNATURE-----

_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Reply via email to