I've been thinking about UIDs in keys, rfc4880 section 5.1 says that by 
convention a UID is an rfc2822 email address but this is not a requirement[1]. 
Gnupg does enforce that restriction unless you explicitly disable it. It would 
seem to make sense to include other strings that can identify a user, many 
people have various URLs which could be said to relate to their identity, 
Facebook accounts, blogs etc... It could potentially be useful to be able to 
associate a key with these other identities, i.e. if you get an email 
purporting to be from someone you only know on a webforum it would be useful to 
be able to verify this. I'm curious what other people on this list think of 
this.


[1] http://tools.ietf.org/html/rfc4880#section-5.11

-- 
Steve Jones <st...@secretvolcanobase.org>
Key fingerprint: 3550 BFC8 D7BA 4286 0FBC  4272 2AC8 A680 7167 C896

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to