Re: establish a trust relationship (Re: missing signatures)

[Santiago Gala]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
El viernes, 26 sept, 2003, a las 07:07 Europe/Madrid, Ask Bjoern Hansen 
escribió:

Likewise for telephone numbers; figuring out a time to make two
calls across the world should be feasible.
For those able to receive/send SMS (text messages), they can be used to 
send or receive key fingerprints, in a very effective and safe back 
channel for identity validation.

I have used SMS quite a few times to send passwords after the account 
setup information had been sent by email.
You can sue the telephone provider if the password is leaked, at least 
in theory. :-P

Some people include their key signature in all their mails.

I'm beginning to sign all my mails, since security is becoming a key 
issue for all Open Source, and signing of communications/releases seems 
to be crucial.

Regards,
     Santiago
P.S.) I know it is a very late answer, I found the thread while making 
a search for stuff on Apache Trust chain.
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQE/y3DmZAeG2a2/nhoRAsa+AKCyZzjp63NyKcoDun84ZfTGTHP37QCgtqwz
rztlV7U/oqbub75bLnSPM6I=
=1Qf0
- -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)
iD8DBQE/y3EBMGY6e0B83Y0RAmgvAJ9JUFeHnssBH3MPlgtVeizoGJLU3ACgnIVU
HakG4GuDFSS6K5ELyGT2xRo=
=pRoN
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]