Digital signatures

Tim ignored_mailbox at yahoo.com.au
Fri Jul 13 01:29:49 UTC 2007


On Thu, 2007-07-12 at 10:01 -0700, Les wrote:
> I am starting this thread because I see many folks signing their
> emails with a digital signature. 

I don't see a problem in someone posting a signed message.  I do see a
problem in beleiving that they are who they claim to be.  There isn't
any verification done, it's self-signed (self created).  I've yet to
find *any* GPG/PGP key that was counter-signed by another person, let
alone one that was counter-signed by someone I trust.

I think that is a glaring omission when it comes to RPM packages, or
even notices about updates.  Nevemind e-mails.

-- 
[tim at bigblack ~]$ rm -rfd /*^H^H^H^H^H^H^H^H^H^Huname -ipr
2.6.21-1.3228.fc7 i686 i386

Using FC 4, 5, 6 & 7, plus CentOS 5.  Today, it's FC7.

Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.






More information about the fedora-list mailing list