> Hmm I guess my policy has a dual-purpose -- key policy (how secure is > it etc.) and signing policy (how well do I check other keys). The > latter needs only a self-signature, the former is another matter. I > don't think someone else can vouch for the facts about how I store my > key, as they have no way to check -- even if I use a smart-card, how > do they know I didn't generate off-card and keep a backup somewhere?
Oh, and this also poses the question: Is it better to have two separate documents, or a single policy with all that information? -- Jerome Baum Hessenweg 222 48432 Rheine GERMANY tel +49-1578-8434336 email [email protected] web www.jeromebaum.com -- Einigkeit und Recht und Modeerscheinung -- PGP: A0E4 B2D4 94E6 20EE 85BA E45B 63E4 2BD8 C58C 753A PGP: 2C23 EBFF DF1A 840D 2351 F5F5 F25B A03F 2152 36DA -- http://five.sentenc.es _______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
