[SGVLUG] CAcert Web of Trust?
Emerson, Tom
Tom.Emerson at wbconsultant.com
Wed Mar 29 15:03:11 PST 2006
> -----Original Message-----
> John E. Kreznar
> "Greg Stark" <gstark at electrorent.com> writes:
>
> > If there are no objections, I will post an announcement to
> the CAcert
> > BLOG, that SGVLUG will have a registration at the April meeting.
>
> The power of strong cryptography is that it enables each
> individual, acting alone, to effectively defend herself
> against the body politic. Reliance on identity documents
> sanctioned by that very body politic is at odds with this ideal.
Hmmm... Interesting comment, but I'm not entirely sure if you meant this
as an objection to a cert-signing party or not...
> The owner of an encryption key earns trust by digitally
> signing consistently trustworthy messages, not by registering
> with a certification authority such as CAcert.org. Linking
> trust to government ID dilutes and sullies earned trust. As
> well, it requires the ID holder to enter into contract with
> government.
I think there are some confused issues here (though I might be the one
confused) As I understand it, the purpose of signing certificates is to
ensure the identity of the holder, not necessarilly the trustworthiness
of that person -- after all, anyone could apply for a certificate and
claim to be "Obi Wan Kenobe", though it might raise an eyebrow or two if
the e-mail address registered to the certificate was
"vader at darkside.force" [substitute your own favorite adversaries as
appopriate]
What, in this context, is a "consistently trustworthy message"? After
all, signing the message "the sky is falling" 100 days in a row would be
"consistently trustworthy" -- the "trustworthiness" may be zero, but it
would be *consistently* zero and that's what counts...
> - --
> John E. Kreznar jek at ininx.com 9F1148454619A5F08550
> 705961A47CC541AFEF13
> Q: What nationality are you?
> A: My true answer is that I don't know. If nationality is
> something that requires the consent of the alleged national,
> well, I don't consent (whichever the nation). On the other
> hand, if nationality is something that can be imposed without
> regard to consent, well, then I'm the wrong person to ask.
Are you sure you're not a co-writer of the movie Warner Brothers
released last week -- "V for Vendetta"? :)
More information about the SGVLUG
mailing list