Manoj Srivastava <[EMAIL PROTECTED]> writes:

>         I see you have never been in a large key signing party.  There
>  is a certain expectation of trust, since no one can actrually detect
>  delibrate forgeries. 

Except that there was nothing forged about Martin's ID card, as it has
been reported.  It was exactly what it claimed to be, nothing more and
nothing less.

>         If people start bringing in forged documents,  no amount of
>  caution on part of laypeople like most software developers is proof
>  against such deception.  If such deception is accepted behaviour, we
>  may as well throw out thetrust metric, and let /. upload packages
>  into Debian.

This may be true, except that *the document was not forged*.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to