On Wed, Jul 1, 2009 at 10:43 AM, inode0 <span dir="ltr">&lt;<a href="mailto:inode0@gmail.com">inode0@gmail.com</a>&gt;</span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">
<br>
</div>You cannot validate an imported key without having access to the full<br>
fingerprint. You should always validate the key&#39;s fingerprint with the<br>
key&#39;s owner before signing it. You can call the person or use some<br>
other means, it is convenient for people if it is just on the card.</blockquote><div><br>So let me make sure I&#39;m following this (while exposing what a noob I am in this regard): I would validate an imported key from you by checking what&#39;s on my screen against the full fingerprint on your business card. Is that the rationale and benefit of having the full fingerprint on the card?<br>
<br>[I can&#39;t imagine calling you up and reading off your full fingerprint to you and expect you to stay awake until I finish . . .  :-)  ]<br><br>Larry<br></div></div>