On 2023-04-13 16:20, D. Hugh Redelmeier wrote:
| From: James Knott via talk <[email protected]>
|
| So, if I have a signing party with my group of friends and you have one with
| yours, how do I verify your signature, if I don't know your friends?

<https://en.wikipedia.org/wiki/Web_of_trust>


I'm aware of this.  However, if we are in independent groups, with no connection, how do I trust your group?  How do know that everyone in your group is real?  With X.509, my group and yours could be traceable to the root authorities.  Think of DNS.  What if there were separate groups of root servers that didn't communicate.  How would that work out for the Internet?


---
Post to this mailing list [email protected]
Unsubscribe from this mailing list https://gtalug.org/mailman/listinfo/talk

Reply via email to