On 03/10/2011 04:56, Hauke Laging wrote:
A signature itself does not say much except that the one who created it had
access to the secret key.
... and whether or not the thing you have (email message, software blob,
etc.) is the same as the thing that was signed by the signer. Beyond
that you're correct in saying that everything else you can infer from
the signature is based on your understanding/confidence/etc. in the
keyholder's security, policy, etc.
Doug
--
Nothin' ever doesn't change, but nothin' changes much.
-- OK Go
Breadth of IT experience, and depth of knowledge in the DNS.
Yours for the right price. :) http://SupersetSolutions.com/
_______________________________________________
Gnupg-users mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnupg-users
