Horton

Re: PGP signing releases

Kurt Roeckx <q@ping.be>

View thread View on postgr.es
From: Kurt Roeckx <Q@ping.be>
To: Curt Sampson <cjs@cynic.net>
Cc: Greg Copeland <greg@CopelandConsulting.Net>, "Marc G. Fournier" <scrappy@hub.org>, Neil Conway <neilc@samurai.com>, PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Date: 2003-02-04T17:55:20Z
Lists: pgsql-hackers 
On Tue, Feb 04, 2003 at 01:35:47PM +0900, Curt Sampson wrote:
> On Mon, 3 Feb 2003, Kurt Roeckx wrote:
> 
> > I'm not saying md5 is as secure as pgp, not at all, but you can't
> > trust those pgp keys to be the real one either.
> 
> Sure you can. Just verify that they've been signed by someone you trust.

I know how it works, it's just very unlikely I'll ever meet
someone so it gives me a good chain.

Anyway, I think pgp is good thing to do, just don't assume that
it's always better then just md5.


Kurt