Re: How do I run 32-bit programmes on 64-bit linux?

Jim Cheetham schreef op vr 04-10-2013 om 12:24 [+1300]:
> Just because a key isn't in a web of trust doesn't mean that there's
> no way to verify it ...
> 
> For example, my key can be verified by asking me directly, or looking
> at the fingerprint printed on my business cards, or by searching
> google and seeing where it has been used in the past.

Well, these are all out-of-band things (though I'm not sure I'd rely on
the google one.) Once I've verified it appropriately, then you get added
to the WoT. But yes, it's a given that it's necessary to bootstrap it. I
wasn't planning on getting into a discussion of the details :)

> The web of trust is good at some sorts of verification (i.e. in a
> reasonably well-defined community such as the Debian developers), but
> not necessarily good at others ...

That's not really true. If you have two or three signatures from people
you've met, it's pretty easy to be generally trusted then. Get ten or
so, and you're pretty close to the centre. It's designed to be a web,
after all. A CA-type system would be better for a well defined group,
but has other, significant issues.

The problem really is that it's mostly only the technical community
using this, as it requires a bit more effort and interest than just
sending an email from gmail does.

This is mostly on my mind because I have just generated a new GPG key
(that only lives on a PIN-protected smartcard, also has a stronger
algorithm than the old one) and have been hitting up workmates to sign
it over the past week or so :)

PS: no need to CC me, I'm on the list too :)

Robin.

_______________________________________________
DunLUG mailing list
[email protected]
http://lists.ethernal.org/listinfo/dunlug
DunLUG Wiki - http://dunlug.kallisti.net.nz/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABCAAGBQJSTf81AAoJEHf1tyT4cTvftlYIAIZ3i9XnmKzvUfQg/Q15ysfx
tYYWuNI8Cv6T3kxVO4T3RUH1gp3rlqkQ4WsxCr4VsoBQaEd6R4ol6RDnTiMCORzL
L6viScF50Rv3kr3KwUgBuG4KgRO2Xt6VL6e4GmMGXBzYOE+zPr0qzAc014y6N1oW
hf+PvVSidZecc5AEAZqOle4jU7hEZKZZtraVBnT1DnUJdix4mHsnnijVaqPEPkTa
Q2qqygTPAl3aQGe8ZDw/w+3wG1BFtMyd1Y6K9mRTOb5i04YX9YnFFBJLY0srTS/V
3SvAlKWqo2KzkVTJVRvSCbGus/AaHofb7LlAPar/UwupH3ze956QwyDcHlzDWnY=
=Wprv
-----END PGP SIGNATURE-----