On Sat, Nov 08, 2003 at 03:48:43PM NZDT, Christopher Sawtell wrote:
> 
> I'd also just like to suggest that if people are really going to expect other 
> members to sign crypto keys for them, that we all bring some sort of 
> (semi)-official identity document to the meeting.

That's the only way to do it properly (but I'd strike the "semi" portion
of that statement.  If we don't put in effort to verify identities
properly, our web of trust will mean nothing).  I keep a copy of my
fingerprints in my wallet for just that purpose.  It's a perfect match
for my two pieces of fully official ID.

A word of caution, though.  There's a lot of mishandled keys out there,
especially with lost passphrases or secret keys.  I'd recommend that
anyone who wants to learn about gpg/pgp put in a bit of research before
generating a keypair.  Whether this is individual time or waiting for
a presentation doesn't matter much.  Exchanging information can happen
any time.  Future meetings may be just as useful for this.

Greg
--- -

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to