-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

'Lo Thomas,

On Wed, 11 Dec 2002 10:46:08 +0700 your time, you said:

>> Well first of all you'll need to publish your key to the keyserver.

TF> No you don't. Any key published there can never be deleted.

As  has  been  mentioned in reply to your message already, you should really
create a revoke key really, and back it up somewhere safe!

It  would  be  interesting  to  know  how  many PGP users forgot or lost the
password  to  the their very first published key when they started using PGP
<vbg>  Indeed, it  would be interesting to know exactly how many 'abandoned'
keys are stored on the keys servers ;)

But  to  the point, I don't agree. Victor wasn't sporting any reference to a
key  in  his  email  so  his sig couldn't be checked. If you don't want your
public  key 'public' and want it contained for use only between a select few
then of course their is no purpose to publishing it to the keyservers, and I
would agree with you there. However, if you want to use a public key so that
anyone can contact you using PGP or verify your sig then I reckon publishing
is still the best method of distribution.

I have made my key available through my domain, and reference it in my email
sig.  I have also published it on the keyservers so that my signature can be
quickly  verified  and  my key imported should someone not wish to go to the
trouble of manually grabbing from my site before they can verify my sig.

In  any  event,  if  you  want  your keys to remain private then sure, don't
publish.


- --
Sl�n,

 Simon @ theycallmesimon.co.uk

******************************************
PGP Key: http://pgp.theycallmesimon.co.uk/

Faffing about with TB! v1.62 on W2K SP3

#1944. Mars Dry Slew I Quo �

-----BEGIN PGP SIGNATURE-----
Comment: Privacy is freedom. Protect your freedom with PGP!
Comment: KeyID: 0x5C7E8966

iQA/AwUBPfc8P8tub/5cfolmEQKEQgCg+WBtvZeQYlOug7kwFUWyGI4yFGcAnjx9
RTuEvKBp0jrolsbjEpQlEhqm
=VkkJ
-----END PGP SIGNATURE-----

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to