RE: Keysigning issues

2003-08-03 Thread Honen, Oren
Hi all, I just wanted to clear something. Signing a document ( i.e. file ) is NOT an identification ! Showing your ID card to someone is identification, also entering password to your account ( with or without the use of Kerberos ). Therefore all the picture issue is out of context here. Signing a

Re: Keysigning issues

2003-08-02 Thread linux_il
Dan Armak wrote: When we get digital IDs+keys though, they'll have photos and we'll have to publish the public keys, I guess... Does that mean photos of everyone will be available? To whom? Anyone have any links to info on the government's plans in this regard? The government already keeps a

Re: Keysigning issues

2003-08-02 Thread Nadav Har'El
On Fri, Aug 01, 2003, Dan Armak wrote about "Keysigning issues": > 2. For some reason, noone seems to use the option of adding a photo to their > gpg key. (Except for me that is :-) Why is that? Photos, printed out along > with fingerprints on the list Muli handed out today, would make paper ID-

Re: Keysigning issues

2003-08-02 Thread Dan Armak
On Saturday 02 August 2003 12:40, Shachar Shemesh wrote: > >Possible solution: create a test text/file on the spot at the keysigning > > party and require participants to sign it, thus demonstrating they indeed > > have the private key. The problem with this is that everyone would have > > to bring

Re: Keysigning issues

2003-08-02 Thread Shachar Shemesh
Dan Armak wrote: Hi all, Here are some thoughts that've been preying on me wrt how we do keysigning. Comments welcome. 1. What we actually check when we look at someone's ID card/driver's license/ passport/etc, is that he's an Israeli (or other) citizen under that name. But we don't actually c

Re: Keysigning issues

2003-08-02 Thread Muli Ben-Yehuda
On Sat, Aug 02, 2003 at 10:41:14AM +0300, Dan Armak wrote: > That's the natural solution. It's ours (printed IDs) that doesn't > look right. It's known as "Manoj's paranoid key signing protocol", http://people.debian.org/~jaqque/keysign.html In my opinion, the method we currently use is safe *

Re: Keysigning issues

2003-08-02 Thread Muli Ben-Yehuda
On Sat, Aug 02, 2003 at 04:13:49AM +0300, Shaul Karl wrote: > 1. Not a full solution but still. Have the place of the key signing >party have a net access and an ssh client so that people that can >access their private key with ssh would be able to remote sign it. >Somewhat alleviate

Re: Keysigning issues

2003-08-02 Thread Dan Armak
On Saturday 02 August 2003 4:13, Shaul Karl wrote: > On Fri, Aug 01, 2003 at 11:30:25PM +0300, Dan Armak wrote: > > Hi all, > >Hello, > > > 1. What we actually check when we look at someone's ID card/driver's > > license/ passport/etc, is that he's an Israeli (or other) citizen under > > that n

Re: Keysigning issues

2003-08-02 Thread Dan Armak
On Saturday 02 August 2003 0:29, Orna Agmon wrote: > On Fri, 1 Aug 2003, Dan Armak wrote: > > 2. For some reason, noone seems to use the option of adding a photo to > > their gpg key. (Except for me that is :-) Why is that? Photos, printed > > out along > > Have you thought of how do blind people s

Re: Keysigning issues

2003-08-01 Thread Shaul Karl
On Fri, Aug 01, 2003 at 11:30:25PM +0300, Dan Armak wrote: > Hi all, Hello, > > 1. What we actually check when we look at someone's ID card/driver's license/ > passport/etc, is that he's an Israeli (or other) citizen under that name. But > we don't actually check he has access to the private

Re: Keysigning issues

2003-08-01 Thread Orna Agmon
On Fri, 1 Aug 2003, Dan Armak wrote: > 2. For some reason, noone seems to use the option of adding a photo to their > gpg key. (Except for me that is :-) Why is that? Photos, printed out along Have you thought of how do blind people sign keys? No, neither have I. But they do: they tell you a wo