Re: digital signature

["Dan Ritter-2" <user=13@nabble.blu.org>]

 On Sat, Dec 29, 2007 at 09:21:58AM -0500, Stephen Adler wrote: 
> To do this right, I believe, I want to get a key pair which is 
> registered with a 3rd party registry like verisign or 
> networksolutions.com or something like that. Is this not so? Say I sign 
> a document with a self generated key pair, how does a third party know 
> that the signature came from me and not someone posing as me who 
> generated their own pair of keys? If I do need to go through the 3rd 
> party registry route, who should I use? 

Verisign and NetSol and the rest of them -- they don't actually 
attest that you are who you claim to be. Put your keys on a 
reputable keyserver. 

Then develop a web of trust. 

(Googling web of trust is a good idea.) 

-dsr- 


-- 
Every time you give up a right, the terrorists win. 
Tyranny is something that creeps up on you. 

http://tao.merseine.nu:81/~dsr/eula.html is hereby incorporated by reference. 

-- 
This message has been scanned for viruses and 
dangerous content by MailScanner, and is 
believed to be clean. 

_______________________________________________ 
Discuss mailing list 
[hidden email] 
http://lists.blu.org/mailman/listinfo/discuss