IETF Logo Mail Archive

Re: pgp signing in van

Phillip Hallam-Baker <hallam@gmail.com> Sat, 07 September 2013 03:40 UTC

Return-Path: <hallam@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9417D21F9D3A for <ietf@ietfa.amsl.com>; Fri, 6 Sep 2013 20:40:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.544
X-Spam-Level:
X-Spam-Status: No, score=-2.544 tagged_above=-999 required=5 tests=[AWL=0.055, BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iLLLvDc8SC2Y for <ietf@ietfa.amsl.com>; Fri, 6 Sep 2013 20:40:00 -0700 (PDT)
Received: from mail-lb0-x232.google.com (mail-lb0-x232.google.com [IPv6:2a00:1450:4010:c04::232]) by ietfa.amsl.com (Postfix) with ESMTP id 693BE21F9D1C for <ietf@ietf.org>; Fri, 6 Sep 2013 20:40:00 -0700 (PDT)
Received: by mail-lb0-f178.google.com with SMTP id z5so3420504lbh.23 for <ietf@ietf.org>; Fri, 06 Sep 2013 20:39:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=y3gYOKWu4QmIljGByi2GzpVB8mVEAxappFEt5f6MWqk=; b=i1jMeFL5kyUT4LM+lNNnHZAubnS5wSE1L6ijw2se7f0NEvToKvdf7tDL/LqmanfCi0 y9tkEhHRmNI2K2GTJ2uQf/baGjX53DR+ngeZECiS88WVpoAcUi0kue3hVhQa/1tULdCT c+QJOd8JQri3p6V/x/lwdLtcpjjIQ44Ef95PR0t06ttbx6Xxgq78VuMsilYIVpE0Ig0P hLUVtnvaHIt+3eFhOMhlDUgvTLT1RpvFWLPPM2oUoH46jub8jw8xdKcP/CyDLpJK/W/p Zz4uXiJbLZ79R+5MIQGRXSNnQJYOaViEUFtXC9xZTB1ZgmiHa/G9+fJWN4tJR+VQcBEz ub/Q==
MIME-Version: 1.0
X-Received: by 10.152.116.7 with SMTP id js7mr5119301lab.11.1378525199329; Fri, 06 Sep 2013 20:39:59 -0700 (PDT)
Received: by 10.112.148.165 with HTTP; Fri, 6 Sep 2013 20:39:59 -0700 (PDT)
In-Reply-To: <6DE840CA-2F3D-4AE5-B86A-90B39E07A35F@nominum.com>
References: <m2zjrq22wp.wl%randy@psg.com> <2309.1378487864@sandelman.ca> <522A5A45.7020208@isi.edu> <CA2A6416-7168-480A-8CE1-FB1EB6290C77@nominum.com> <522A71A5.6030808@gmail.com> <6DE840CA-2F3D-4AE5-B86A-90B39E07A35F@nominum.com>
Date: Fri, 06 Sep 2013 23:39:59 -0400
Message-ID: <CAMm+Lwj_+Ft0Wy6=wQeFxfkRSuyOZjLy_rKUz1PZRvJy-ixAuA@mail.gmail.com>
Subject: Re: pgp signing in van
From: Phillip Hallam-Baker <hallam@gmail.com>
To: Ted Lemon <ted.lemon@nominum.com>
Content-Type: multipart/alternative; boundary="001a11c2672ad1ee9804e5c2e8a8"
Cc: IETF Disgust <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Sep 2013 03:40:01 -0000

On Fri, Sep 6, 2013 at 9:09 PM, Ted Lemon <ted.lemon@nominum.com> wrote:

> On Sep 6, 2013, at 8:21 PM, Melinda Shore <melinda.shore@gmail.com> wrote:
> > when you vouch for someone's identity - in an authoritative
> > trust system - you're also vouching for the authenticity of
> > their transactions.
>
> This is what I mean by "a high bar."   Signing someone's PGP key should
> mean "I know this person as X," not "this person is X."
>
>
For purposes of email security it is not about the keys at all. It is the
email addresses that are the real killer.

I can be very sure that I have the right key for ted.lemon@nominum.com but
is that who I know as Ted Lemon?


One value of IETF key signing parties is that we get a better assurance
that we know the email address we are sending to is the address of the Ted
Lemon that participates in IETF than we can possibly get through Web of
Trust where someone may be signing a key in all good faith but for the
wrong person.



-- 
Website: http://hallambaker.com/

v2.23.0 | Report a Bug | By Email