Am Donnerstag, 11. August 2011, 20:05:55 schrieb Jerome Baum: > There isn't really a "standard trust model". What you should really do > is have a key signing policy and embed the URL to that policy with > every signature (plus, obviously, sign the policy).
For keys with "high" security requirements the policy should also be signed by the ones who signed the key as it would be easy to write and sign a high security policy for a compromised low security key. Hauke -- PGP: D44C 6A5B 71B0 427C CED3 025C BD7D 6D27 ECCB 5814
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
