friends --

If any of you are #1 going to Cleveland next week and #2 have a PGP public key that you're willing to share, please bring printed copies of your key fingerprints. This is a good thing to do in any case: have biz cards or other immutable media with PGP verification info to share when you meet people in person.

I won't be attending the conference (more reasons than I can discuss), but I live not too far away so hope to be in the area ... and I WILL HAVE such fingerprinty papers on my person.

This all comes to mind because the "mainframers web of trust" has popped up on the radar again. We held a traditional PGP key signing party at VM Workshop a couple times, but that was pre-pandemic and we've all slept since then.

The rationale for in-person fingerprint assurance is to promote the individual trust model used by PGP (and GPG). Contrast with the PKI trust model, which, while more widely implemented, requires a third party and usually also requires formal compensation. (The certificate issuers have real costs that must be covered.)


--
-- R; <><

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to