Conversation

Notices

1. rozzin

   Met a bunch of awesome people at #lp2016. And few... #interesting ones. Like the one who refused…

   Wednesday, 23-Mar-16 03:17:35 UTC from status.hackerposse.com
   • rozzin

     I do wonder if there was at least any cogence in the "I don't sign spooks' keys" thought: maybe …

     Wednesday, 23-Mar-16 23:06:10 UTC
   • rozzin

     ... or maybe she thought that "Joshua Judson Rosen" might be a #codename shared by / recycled across multiple people? Like "James Bond"?

     Thursday, 24-Mar-16 13:59:11 UTC
   • rozzin

     I'm confused by the "only certify the identity of goodguys, never of badguys" mentality; don't we WANT #badguys to be reliably recognizable?

     Thursday, 24-Mar-16 14:15:25 UTC
   • windigo

     @rozzin If bad guys get thrown into the web of trust, it allows them to sign other bad guys' impostor keys. :)

     Thursday, 24-Mar-16 17:18:40 UTC
   • rozzin windigo

     @windigo, I guess that's why ID-certification and trust are two separate things in #PGP, "sign" …

     Thursday, 24-Mar-16 18:53:28 UTC
   • rozzin windigo

     As the #GnuPG manual says, bundling #trust into #keysigning "is generally only useful in distinc…

     Thursday, 24-Mar-16 22:30:48 UTC
   • windigo

     @rozzin Ahh, then I misunderstood - I agree, it shouldn't really make any difference who you sign, as long as their identity is clear.

     Friday, 25-Mar-16 18:52:45 UTC
   • rozzin Today I Learned...

     Wow: !TIL that #keybase was founded on a fundamental misunderstanding about how the #PGP / #Gnu…

     Sunday, 21-May-17 19:16:27 UTC