[12684] in Cypherpunks
Re: PGP Question:
daemon@ATHENA.MIT.EDU (Istvan Oszaraz von Keszi)
Thu Apr 28 18:17:50 1994
To: warlord@MIT.EDU (Derek Atkins)
Date: Thu, 28 Apr 94 16:17:15 MDT
From: "Istvan Oszaraz von Keszi" <vkisosza@acs.ucalgary.ca>
Cc: cypherpunks@toad.com
In-Reply-To: <9404282133.AA05939@toxicwaste.media.mit.edu>; from "Derek Atkins" at Apr 28, 94 5:33 pm
Derek Atkins wrote:
> What should be available (although it is not implemented) is a userID
> revocation, where you can basically send out a messages that will
> remove userIDs from a key. Then again, signature revocations should
> be implemented as well...
Sorry Derek, you lost me on this one. Why should there be
signature revocations? When you sign a key, all you are vouching
for is the integrity of the key, and not the integrity of the
key issuer. At least that was my understanding. When would a
signature revocation be necessary? The only time I can think of
a use for this, is if someone has signed a key indiscriminately,
in which case you shouldn't be trusting the validity of any of
the signatory's signatures, since their signatures are
untrustworthy.
If I'm erring in some way, could someone please clairfy?
>
