Boston Linux & UNIX was originally founded in 1994 as part of The Boston Computer Society. We meet on the third Wednesday of each month at the Massachusetts Institute of Technology, in Building E51.

BLU Discuss list archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Discuss] privacy with pgp keys


That uploaded key as a MD5 and SHA224 of the ID aka email...
One can verify that the email and fingerprint I provide will match up to
those hashes..
Its not entirely impossible...

I do appreciate Derek's concern...

In my example I have used a UUID, which is the ultimate but one can use a
which can be a little bit liberal, than providing an email address,
embedding a thumb-print jpeg, or
a IRIS-scan jpeg, or providing some kind of  DNA fingerprint/sequence would
be kind a overly  liberal  ? than
just an email address, which is also possible... if privacy is no


On Thu, Sep 10, 2015 at 1:30 PM, Derek Martin <invalid at>

> On Thu, Sep 10, 2015 at 12:52:55PM -0400, John Abreau wrote:
> > If a key has been stripped of all traces of the owner's identity, I don't
> > see how it would be possible to adequately verify trust of that key
> during
> > the keysigning party.
> Or when you are sending them e-mail.  Or at any other time.  Positive
> identification of the recipient is generally part of what is required,
> so that you do not, say, encrypt company secrets to your competitor,
> instead of your coworker, for example.
> --
> Derek D. Martin   GPG Key ID: 0xDFBEAD02
> -=-=-=-=-
> This message is posted from an invalid address.  Replying to it will
> result in
> undeliverable mail due to spam prevention.  Sorry for the inconvenience.

BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!

Boston Linux & Unix /