Web of Trust (a revolution)

Tim ignored_mailbox at yahoo.com.au
Wed Apr 1 18:03:06 UTC 2009


Bill Crawford:
>> Ought to be possible for people to visit companies' offices and sign their keys, 
>> and add them to the "web of trust" as per PGP / GPG keys. No idea if / how that 
>> should be done, in practice, though.
 

m:
> Difficult at best, who wants to trust a faceless corporation? Not to be 
> cynical but you might trust the receptionist but what about the IT dept? 
> Are they competent?...

I wonder if we were to contact our bank's tech support and ask if we
could confirm their SSL certificate with them (e.g. read the fingerprint
info over the phone), how many of them could actually do it?  Or even
understand.

-- 
[tim at localhost ~]$ uname -r
2.6.27.19-78.2.30.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.






More information about the users mailing list