[BLUG] New GPG key

[Michael Schultheiss]

Joe Auty wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I don't mean to sound like a complete jerk, but what is the draw with
> these key signing parties? Is it some sort of social thing? I only
> really feel compelled to have keys for people that send me critical
> information I might want to authorize and/or encrypt. For casual
> correspondence like this list and most chatting, I guess I haven't
> gotten caught up in collecting public keys.
>
> Am I missing the point here? Again, I don't mean to sound critical of
> the practice, I'm honestly wondering if I'm missing some angle here...

The draw is expanding the web of trust.  If you ever want to join a
project like Debian that requires you already be in a specific web of
trust, participating in key signing parties helps out.

Key signing parties are more for the verification that Person X most
likely controls key X and also has shown photo ID that matches the name
on the key.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://mailman.cs.indiana.edu/pipermail/blug/attachments/20080806/3608da29/attachment.bin