Gentoo Archives: gentoo-dev

From: Maik Schreiber <blizzy@g.o>
To: lb-lists@××××××××××××.org
Cc: gentoo-dev@g.o, ryan.phillips@××××.edu, rphillips@g.o, spider@g.o, gentoo-core@g.o
Subject: Re: [gentoo-dev] Re: [gentoo-core] on the matter of security and cryptography
Date: Mon, 05 Aug 2002 18:42:25
Message-Id: 32875.80.137.171.111.1028590833.squirrel@mail.iq-computing.de
In Reply to: Re: [gentoo-dev] Re: [gentoo-core] on the matter of security and cryptography by Lukas Beeler
1 >> Not entirely the case... Daniel could call me, and since I trust
2 >> daniels PGP key I could have him sign a quote that I state over the
3 >> phone.
4 >
5 > And how exactly do you make sure, that you are talking to Daniel?
6
7 Exactly my point. I don't know how Daniel's voice sounds like, so there's
8 no point in calling him (or vice versa) for identification purposes.
9
10 > You dont have a Passport, which officially states who he is, you
11 > cant compare the foto. Signing over a phone line is completely
12 > worthless, and destroys the web of trust.
13
14 This is almost 100% true, except for the case when you know a person's
15 voice and can positively identify them.
16
17 --
18 Maik Schreiber, Gentoo Developer
19 http://www.gentoo.org
20 mailto:blizzy@g.o