Re: Keysigning without physically meeting ... thoughts?

2005-06-19 Thread Steve Langasek
On Sun, Jun 19, 2005 at 03:19:14PM +1000, Brian May wrote: Steve == Steve Langasek [EMAIL PROTECTED] writes: Steve Many people consider all of options a), b), and c) to be Steve inappropriate, and will instead encrypt each of the uid Steve signatures individually and mail them to

Re: Keysigning without physically meeting ... thoughts?

2005-06-19 Thread Kevin Mark
On Sun, Jun 19, 2005 at 03:19:14PM +1000, Brian May wrote: Steve == Steve Langasek [EMAIL PROTECTED] writes: Is this process correct? Or did something go seriously wrong here? If it was correct, why was it correct? If it was wrong, why was it wrong? For anyone who didn't

Re: Keysigning without physically meeting ... thoughts?

2005-06-18 Thread Brian May
Steve == Steve Langasek [EMAIL PROTECTED] writes: Is this process correct? Or did something go seriously wrong here? If it was correct, why was it correct? If it was wrong, why was it wrong? For anyone who didn't pick it up; I lied: [EMAIL PROTECTED] isn't my email address.

Re: Keysigning without physically meeting ... thoughts?

2005-06-14 Thread Andrew Suffield
On Sun, Jun 12, 2005 at 12:10:15AM -0700, Steve Langasek wrote: On Sun, Jun 12, 2005 at 07:49:51AM +0100, Andrew Suffield wrote: On Sat, Jun 11, 2005 at 11:17:21PM -0700, Steve Langasek wrote: What are we setting out to achieve? - To verify that the person so identified controls a

Re: Keysigning without physically meeting ... thoughts?

2005-06-12 Thread Steve Langasek
On Sun, Jun 12, 2005 at 11:49:29AM +1000, Brian May wrote: Can I please ask the blindingly obvious question that is so obvious nobody has asked? What is the point of keysigning? What are we setting out to achieve? - To authenticate a person's real-world identity - To verify that the person

Re: Keysigning without physically meeting ... thoughts?

2005-06-12 Thread Andrew Suffield
On Sat, Jun 11, 2005 at 11:17:21PM -0700, Steve Langasek wrote: What are we setting out to achieve? - To verify that the person so identified controls a specific email address What does 'control' mean here? Given this: Many people consider all of options a), b), and c) to be inappropriate,

Re: Keysigning without physically meeting ... thoughts?

2005-06-12 Thread Steve Langasek
On Sun, Jun 12, 2005 at 07:49:51AM +0100, Andrew Suffield wrote: On Sat, Jun 11, 2005 at 11:17:21PM -0700, Steve Langasek wrote: What are we setting out to achieve? - To verify that the person so identified controls a specific email address What does 'control' mean here? Given this:

Re: Keysigning without physically meeting ... thoughts?

2005-06-11 Thread Brian May
Wesley == Wesley J Landaker [EMAIL PROTECTED] writes: Wesley I wrote this up to someone. I thought I'd share it, and Wesley get your thoughts. (e.g. anybody see any weaknesses in Wesley #1-#3 that *aren't* present in the typical meet, check ID, Wesley get GPG fingerprint,

Re: Keysigning without physically meeting ... thoughts?

2005-06-09 Thread Gunnar Wolf
Ron Johnson dijo [Wed, Jun 01, 2005 at 05:48:46AM -0500]: A while ago, in an IRC discussion, it was revealed that a notary in the US doesn't mean as much as it does in Europe. AIUI, in the US, a notary is just some extra title a lot of secretaries have, so that they can make some

Re: Keysigning without physically meeting ... thoughts?

2005-06-02 Thread Ron Johnson
On Wed, 1 Jun 2005 11:52:03 +0100 Andrew Suffield [EMAIL PROTECTED] wrote: On Tue, May 31, 2005 at 02:13:54PM -0600, Wesley J. Landaker wrote: On Tuesday 31 May 2005 14:11, Andrew Suffield wrote: On Tue, May 31, 2005 at 09:03:12AM -0600, Wesley J. Landaker wrote: [snip] A notary doesn't

Re: Keysigning without physically meeting ... thoughts?

2005-06-02 Thread Florian Weimer
* Wouter Verhelst: Well, in Belgium it's not /that/ bad (a notary is required by law to give you free advice), but the moment he uses his stamp, it indeed is a three digit bill (around ยค900 last time I required the use of a notary's services) The fee depends in part on the value of the

Re: Keysigning without physically meeting ... thoughts?

2005-06-02 Thread Marc Haber
On Thu, 02 Jun 2005 02:17:50 +0200, Bernd Eckenfels [EMAIL PROTECTED] wrote: In germany the post offices offer a service where you hand the clerk your id and he will check it, enter the details into a letter which he sends to the receipient. This is called postident. That way you can do age

Re: Keysigning without physically meeting ... thoughts?

2005-06-02 Thread Jaakko Niemi
On Thu, 02 Jun 2005, Paul TBBle Hampson wrote: I was told to get a notarised form for a domain transfer before the domain registrar would release it. I ended up losing the domain (_) because I discovered that to find a notary in Australia, you have to go to a US Embassy. Huh? I've delivered

Re: Keysigning without physically meeting ... thoughts?

2005-06-02 Thread Ron Johnson
On Fri, 3 Jun 2005 01:36:26 +0300 Jaakko Niemi [EMAIL PROTECTED] wrote: On Thu, 02 Jun 2005, Paul TBBle Hampson wrote: I was told to get a notarised form for a domain transfer before the domain registrar would release it. I ended up losing the domain (_) because I discovered that to find a

Re: Keysigning without physically meeting ... thoughts?

2005-06-02 Thread Paul TBBle Hampson
On Fri, Jun 03, 2005 at 01:36:26AM +0300, Jaakko Niemi wrote: On Thu, 02 Jun 2005, Paul TBBle Hampson wrote: I was told to get a notarised form for a domain transfer before the domain registrar would release it. I ended up losing the domain (_) because I discovered that to find a notary in

Re: Keysigning without physically meeting ... thoughts?

2005-06-01 Thread Wouter Verhelst
On Wed, Jun 01, 2005 at 07:54:51AM +0200, Marc Haber wrote: On Tue, 31 May 2005 14:13:54 -0600, Wesley J. Landaker [EMAIL PROTECTED] wrote: Right, but they have to get it notarized (or forge a notary's seal, which is a criminal offense, at least in the US) which requires government ID

Re: Keysigning without physically meeting ... thoughts?

2005-06-01 Thread Ron Johnson
On Wed, 01 Jun 2005 07:54:51 +0200 Marc Haber [EMAIL PROTECTED] wrote: On Tue, 31 May 2005 14:13:54 -0600, Wesley J. Landaker [EMAIL PROTECTED] wrote: Right, but they have to get it notarized (or forge a notary's seal, which is a criminal offense, at least in the US) which requires

Re: Keysigning without physically meeting ... thoughts?

2005-06-01 Thread Ron Johnson
On Wed, 1 Jun 2005 10:14:43 +0200 Wouter Verhelst [EMAIL PROTECTED] wrote: On Wed, Jun 01, 2005 at 07:54:51AM +0200, Marc Haber wrote: On Tue, 31 May 2005 14:13:54 -0600, Wesley J. Landaker [EMAIL PROTECTED] wrote: Right, but they have to get it notarized (or forge a notary's seal, which

Re: Keysigning without physically meeting ... thoughts?

2005-06-01 Thread Andrew Suffield
On Tue, May 31, 2005 at 02:13:54PM -0600, Wesley J. Landaker wrote: On Tuesday 31 May 2005 14:11, Andrew Suffield wrote: On Tue, May 31, 2005 at 09:03:12AM -0600, Wesley J. Landaker wrote: I wrote this up to someone. I thought I'd share it, and get your thoughts. (e.g. anybody see any

Re: Keysigning without physically meeting ... thoughts?

2005-06-01 Thread Paul TBBle Hampson
On Wed, Jun 01, 2005 at 05:48:46AM -0500, Ron Johnson wrote: On Wed, 1 Jun 2005 10:14:43 +0200 Wouter Verhelst [EMAIL PROTECTED] wrote: On Wed, Jun 01, 2005 at 07:54:51AM +0200, Marc Haber wrote: On Tue, 31 May 2005 14:13:54 -0600, Wesley J. Landaker [EMAIL PROTECTED] wrote: Right,

Re: Keysigning without physically meeting ... thoughts?

2005-06-01 Thread Wesley J. Landaker
On Wednesday 01 June 2005 04:52, Andrew Suffield wrote: Right, but they have to get it notarized (or forge a notary's seal, which is a criminal offense, at least in the US) which requires government ID (again, at least in the US). A notary doesn't certify that the document you hand them is

Re: Keysigning without physically meeting ... thoughts?

2005-06-01 Thread Wesley J. Landaker
On Tuesday 31 May 2005 23:54, Marc Haber wrote: The entire procedure is quite US centric. I don't understand why you US guys are so fond of your notaries. Over here, it's a three digit bill for the notary to open the office door and to offer you a chair, so there might be cultures where one

Re: Keysigning without physically meeting ... thoughts?

2005-06-01 Thread Wesley J. Landaker
On Tuesday 31 May 2005 23:54, Marc Haber wrote: The entire procedure is quite US centric. I don't understand why you US guys are so fond of your notaries. Over here, it's a three digit bill for the notary to open the office door and to offer you a chair, so there might be cultures where one

Re: Keysigning without physically meeting ... thoughts?

2005-06-01 Thread Bernd Eckenfels
In article [EMAIL PROTECTED] you wrote: Well, the whole point is that they also certify that you are who you say you are, i.e. they check your ID. In germany the post offices offer a service where you hand the clerk your id and he will check it, enter the details into a letter which he sends

Keysigning without physically meeting ... thoughts?

2005-05-31 Thread Wesley J. Landaker
Hi folks, I wrote this up to someone. I thought I'd share it, and get your thoughts. (e.g. anybody see any weaknesses in #1-#3 that *aren't* present in the typical meet, check ID, get GPG fingerprint, assuming #4 is always used afterwards?) On Tuesday 31 May 2005 08:44, Wesley J. Landaker

Re: Keysigning without physically meeting ... thoughts?

2005-05-31 Thread Andrew Suffield
On Tue, May 31, 2005 at 09:03:12AM -0600, Wesley J. Landaker wrote: I wrote this up to someone. I thought I'd share it, and get your thoughts. (e.g. anybody see any weaknesses in #1-#3 that *aren't* present in the typical meet, check ID, get GPG fingerprint, assuming #4 is always used

Re: Keysigning without physically meeting ... thoughts?

2005-05-31 Thread Wesley J. Landaker
On Tuesday 31 May 2005 14:11, Andrew Suffield wrote: On Tue, May 31, 2005 at 09:03:12AM -0600, Wesley J. Landaker wrote: I wrote this up to someone. I thought I'd share it, and get your thoughts. (e.g. anybody see any weaknesses in #1-#3 that *aren't* present in the typical meet, check ID,

Re: Keysigning without physically meeting ... thoughts?

2005-05-31 Thread Jacob S
On Tue, 31 May 2005 14:13:54 -0600 Wesley J. Landaker [EMAIL PROTECTED] wrote: On Tuesday 31 May 2005 14:11, Andrew Suffield wrote: On Tue, May 31, 2005 at 09:03:12AM -0600, Wesley J. Landaker wrote: I wrote this up to someone. I thought I'd share it, and get your thoughts. (e.g. anybody

Re: Keysigning without physically meeting ... thoughts?

2005-05-31 Thread Wesley J. Landaker
On Tuesday 31 May 2005 20:48, Jacob S wrote: Regardless, how is this different from meeting someone in person? They can just show me their fake ID--I won't know it's fake. (And, as you said, forged ID happens a lot and is easily available. =) So why bother with steps 1 2 when 3 is the

Re: Keysigning without physically meeting ... thoughts?

2005-05-31 Thread Marc Haber
On Tue, 31 May 2005 14:13:54 -0600, Wesley J. Landaker [EMAIL PROTECTED] wrote: Right, but they have to get it notarized (or forge a notary's seal, which is a criminal offense, at least in the US) which requires government ID (again, at least in the US). The entire procedure is quite US