Re: Why are people singing there postings on this mailling list ?

2006-04-16 Thread dgmm
On Saturday 15 April 2006 15:23, Benjamin Lutz wrote:
 On Saturday 15 April 2006 15:23, Kees Plonsz wrote:
  Is is so important to know that the question or answer came from
  that person ? I don't think so.
  Even if it were so, for me it is too much trouble to import every key
  into my key-database from a key-server.

 I sign emails for the same reason I sign my snail-mail letters with a pen.
 I like providing authenticity. Whether the recipient actually checks the
 signatures is not that important, important is that if the need or desire
 arises, he can.

 I don't import every key I come across either, usually only those keys for
 which I get signatures on a regular basis.

  On the other hand, those who aren't able to read singed messages
  are confronted with a lot of carbage tekst wich makes the posting
  harder to read.

 Most people use PGP/Mime these days. If your mail client does not support
 PGP, the signature will be surpressed or maybe shown as attachment. Either
 way, that doesn't make the mail content harder to read. And if your Mail
 client doesn't support Mime yet, well, that's your choice, and seeing the
 signature plaintext is far from the worst inconvience you'll have to put up
 with in that case.

  We don't send postings in .html for that same reason.

 That's different. Html text means there's no readable content at all for
 non-HTML mail readers. And these are quite common.

 I sign my emails for two other reasons. First, I'm advocating adoption of
 PGP by everyone. I wish to sensitize people for the facts that standard
 emails are neither private nor authenticated, and that you can achieve
 these very important things with PGP. Frankly, I find it staggering how
 many people send around confidential information in emails over the public
 internet, without thinking of the consequences.

 The second reason is very personal. It takes some effort on my part to sign
 email. I am not using any key agent, which means I enter my keyphrase every
 time I send an email. This makes the process of sending an email more
 conscious for me: I think twice whether I really want to send it. Sometimes
 times I've stopped myself from sending an email I would later regret (a
 flame, or an angry answer, something like that) at the signing stage. It
 means that sending an email is not as much of a fire-and-forget thing for
 me. I like that.

You raise some good points there.  I've not looked at the above at all for my 
own use yet.  Do you recommend some reading on what it is, how-tos etc which 
are a little less dry than man pages? 

-- 
Dave
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Why are people singing there postings on this mailling list ?

2006-04-15 Thread Kees Plonsz
Is is so important to know that the question or answer came from
that person ? I don't think so.
Even if it were so, for me it is too much trouble to import every key
into my key-database from a key-server.
On the other hand, those who aren't able to read singed messages
are confronted with a lot of carbage tekst wich makes the posting
harder to read.
We don't send postings in .html for that same reason.

Let me hear your opinion about this..

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Why are people singing there postings on this mailling list ?

2006-04-15 Thread Jonathan Horne
On Saturday 15 April 2006 08:23, Kees Plonsz wrote:
 Is is so important to know that the question or answer came from
 that person ? I don't think so.
 Even if it were so, for me it is too much trouble to import every key
 into my key-database from a key-server.
 On the other hand, those who aren't able to read singed messages
 are confronted with a lot of carbage tekst wich makes the posting
 harder to read.
 We don't send postings in .html for that same reason.

 Let me hear your opinion about this..

my 2 cents is:
Ive never imported one key in my entire life, nor have i had need to.

hehe, here is how i sign emails:
Jonathan Horne
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Why are people singing there postings on this mailling list ?

2006-04-15 Thread Bill Moran
Kees Plonsz [EMAIL PROTECTED] wrote:

 Is is so important to know that the question or answer came from
 that person ? I don't think so.
 Even if it were so, for me it is too much trouble to import every key
 into my key-database from a key-server.
 On the other hand, those who aren't able to read singed messages
 are confronted with a lot of carbage tekst wich makes the posting
 harder to read.
 We don't send postings in .html for that same reason.
 
 Let me hear your opinion about this..

There have been occasional incidents of impersonation for the purpose
of defaming character.

While I'm not Theo deRadtt, and therefore not a huge target for such
activities, I can't blame anyone for signing every single message they
send, so they establish a pattern that can later prove which messages
were truely theirs.

With regards to your mail program issues:  Digisigs don't use very many
bytes, and most modern MUAs will display a signed message cleanly.  Even
those that don't still allow the message to be read.

Considering the number of identity thefts that occur every year, I
believe digisigs are a necessary protective evil that we'd best get
used to.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Why are people singing there postings on this mailling list ?

2006-04-15 Thread Benjamin Lutz
On Saturday 15 April 2006 15:23, Kees Plonsz wrote:
 Is is so important to know that the question or answer came from
 that person ? I don't think so.
 Even if it were so, for me it is too much trouble to import every key
 into my key-database from a key-server.

I sign emails for the same reason I sign my snail-mail letters with a pen. I 
like providing authenticity. Whether the recipient actually checks the 
signatures is not that important, important is that if the need or desire 
arises, he can.

I don't import every key I come across either, usually only those keys for 
which I get signatures on a regular basis.

 On the other hand, those who aren't able to read singed messages
 are confronted with a lot of carbage tekst wich makes the posting
 harder to read.

Most people use PGP/Mime these days. If your mail client does not support PGP, 
the signature will be surpressed or maybe shown as attachment. Either way, 
that doesn't make the mail content harder to read. And if your Mail client 
doesn't support Mime yet, well, that's your choice, and seeing the signature 
plaintext is far from the worst inconvience you'll have to put up with in 
that case.

 We don't send postings in .html for that same reason.

That's different. Html text means there's no readable content at all for 
non-HTML mail readers. And these are quite common.

I sign my emails for two other reasons. First, I'm advocating adoption of PGP 
by everyone. I wish to sensitize people for the facts that standard emails 
are neither private nor authenticated, and that you can achieve these very 
important things with PGP. Frankly, I find it staggering how many people send
around confidential information in emails over the public internet, without 
thinking of the consequences.

The second reason is very personal. It takes some effort on my part to sign 
email. I am not using any key agent, which means I enter my keyphrase every 
time I send an email. This makes the process of sending an email more 
conscious for me: I think twice whether I really want to send it. Sometimes 
times I've stopped myself from sending an email I would later regret (a 
flame, or an angry answer, something like that) at the signing stage. It 
means that sending an email is not as much of a fire-and-forget thing for me. 
I like that.

Cheers
Benjamin


pgpXG3LWRXQln.pgp
Description: PGP signature


Re: Why are people singing there postings on this mailling list ?

2006-04-15 Thread Nicolas Blais
On Saturday 15 April 2006 10:23, Benjamin Lutz wrote:
 On Saturday 15 April 2006 15:23, Kees Plonsz wrote:
  Is is so important to know that the question or answer came from
  that person ? I don't think so.
  Even if it were so, for me it is too much trouble to import every key
  into my key-database from a key-server.

 I sign emails for the same reason I sign my snail-mail letters with a pen.
 I like providing authenticity. Whether the recipient actually checks the
 signatures is not that important, important is that if the need or desire
 arises, he can.

 I don't import every key I come across either, usually only those keys for
 which I get signatures on a regular basis.

  On the other hand, those who aren't able to read singed messages
  are confronted with a lot of carbage tekst wich makes the posting
  harder to read.

 Most people use PGP/Mime these days. If your mail client does not support
 PGP, the signature will be surpressed or maybe shown as attachment. Either
 way, that doesn't make the mail content harder to read. And if your Mail
 client doesn't support Mime yet, well, that's your choice, and seeing the
 signature plaintext is far from the worst inconvience you'll have to put up
 with in that case.

  We don't send postings in .html for that same reason.

 That's different. Html text means there's no readable content at all for
 non-HTML mail readers. And these are quite common.

 I sign my emails for two other reasons. First, I'm advocating adoption of
 PGP by everyone. I wish to sensitize people for the facts that standard
 emails are neither private nor authenticated, and that you can achieve
 these very important things with PGP. Frankly, I find it staggering how
 many people send around confidential information in emails over the public
 internet, without thinking of the consequences.

 The second reason is very personal. It takes some effort on my part to sign
 email. I am not using any key agent, which means I enter my keyphrase every
 time I send an email. This makes the process of sending an email more
 conscious for me: I think twice whether I really want to send it. Sometimes
 times I've stopped myself from sending an email I would later regret (a
 flame, or an angry answer, something like that) at the signing stage. It
 means that sending an email is not as much of a fire-and-forget thing for
 me. I like that.

 Cheers
 Benjamin

+1, well said.

Nicolas.
-- 
FreeBSD 7.0-CURRENT #1: Sat Apr  8 21:33:25 EDT 2006 
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/CLK01A 
PGP? : http://www.clkroot.net/security/nb_root.asc


pgpR9hjXEdxUn.pgp
Description: PGP signature