Re: Security of verifying gpg keys from internet key servers

2018-10-28 Thread Derek Martin
On Sun, Oct 28, 2018 at 11:39:37PM +1100, Ben McGinnes wrote: > >> Well, verifying the identity of an unknown person with some server > >> over the Inrernet is not very reliable, isn't it? > > > > In what way? I think gnupg.net is a pretty secure source to look up > > keys. There's no other way

Re: Security of verifying gpg keys from internet key servers

2018-10-28 Thread Ben McGinnes
On Mon, Aug 13, 2018 at 09:54:54PM +0100, David Woodfall wrote: > On Monday 13 August 2018 20:22, > Matthias Apitz put forth the proposition: >> On Monday, 13 August 2018 18:59:38 CEST, David Woodfall >>> Dave, do you verify gnuPG keys/signs on the fly? Is this secure? Thx >>> >>> Mutt