Re: [75attendees] No PGP Key Signing session??

[Henrik Nordstrom <[e-mail]>]

tis 2009-07-28 klockan 09:22 +0200 skrev Iljitsch van Beijnum:
> On 28 jul 2009, at 7:57, Teddy Hogeborn wrote:
> 
> > I am very surprised to NOT see a PGP signing session on the agenda for
> > IETF 75 .  Is there an unofficial one planned outside the agenda?
> 
> What I understand is that there is no checking of government IDs at  
> theses IETF PGP signing sessions. That doesn't seem very useful to me...

OpenPGP does not enforce a specific signing policy. The policy on how
you verify the identity of the entity having of the key identities you
sign is basically up to you to define, just as it is you who decide and
accept to sign the key identities in question. Some have ID policies,
some have other policies.

If you want others to trust your signatures it's recommended you have a
reasonably clear policy defined and that you communicate this policy via
suitable means. To help in this the OpenPGP signatures includes an
option to indicate a location where one can look up the policy you used
when making that signature.

Regards
Henrik