Re: PGP keysigning in the Bay Area?

[http://dummy.us.eu.org/robert (robert)]

 > From: Joe Chou <http://www.cgl.ucsf.EDU/~jchou>
 > Date: Thu  Dec  5,  9:35pm
 >
 > -----BEGIN PGP DECRYPTED BLOCK-----
 > -----BEGIN PGP DECRYPTED BLOCK-----
 > -----BEGIN PGP DECRYPTED BLOCK-----
 > -----BEGIN PGP DECRYPTED BLOCK-----
 > -----BEGIN PGP SIGNED MESSAGE-----BY SAFEMAIL-----
 > 
 > Heya,
 > 
 > >I'm interested!
 > >
 > >- --
 > >      >> Tax the rich: vote Peace and Freedom. <<
 > >       >> Stop overpopulation: adopt instead. <<
 > 
 > Turns out only you and 2 other people (one actually in Berkeley as well)
 > replied to my initial post about interest in a Bay Area PGP keysigning --
 > not a huge response.
 > 
 > Still, the other guy from Berkeley who replied (Anirvan Chatterjee)
 > suggested that perhaps next year, say early February, he or I should
 > try again and drum up interest and post a bit more widely. Sounds good
 > to me.
 > 
 > Incidentally, I was curious about something -- the point of a keysigning
 > is typically to lend more support that a public key is really *yours*.
 > Yet, when I fetched your key from the public keyservers, I found that
 > none of the 3 user ID's actually had a real identity to it -- just
 > email addresses. So, I was wondering, why bother getting your key signed?

I was just told to sign my key.  I don't know why it matters at all since
the keyserver key can get overwritten at any time by anybody.  But I can
read this message so something must be right!

Regardless, I don't know who I'd ask to get my key signed since I'm the
only one I know who uses PGP (other than you, I suppose).

 > 
 > Actually, I just figured one use out -- it would be evidence that the
 > person who receives email at that address actually owns this key... Still,
 > at a keysigning session, you have to prove your identity, and if your
 > identity is merely an email address, I'm not sure how you'd prove it.
 > 
 > Or perhaps you have a different public key, that actually has your name
 > on it. Whatever...  :)
 > 
 > Regards,
 > 
 > Joe
 > 
 > -----BEGIN PGP SIGNATURE-----BY SAFEMAIL-----
 > Version: 1.0b5a e29
 > 
 > iQCVAwUBMqewmQtQSc4/p299AQEwbwQAov0AXNaNl0eL1MPxJcFOTaOa4hspqkYR
 > imNY2BlBOcPpjgu2oGtwHRDDdSNOLxqR/W+bQtbNrViF5qWMEzlAtPfxWan7mn3t
 > uzF/w1yPVS55RTR6A4gVgS+nO9o1gqCzAN67p6SIaIOffWr3zokRWUWdLeZMbbhK
 > XrS7YjcWvh4=
 > =iBfZ
 > -----END PGP SIGNATURE-----

Say, how come your address, http://www.cgl.ucsf.EDU/~jchou, doesn't have a key on
pgp.ai.mit.edu?

Also, what is this SAFEMAIL thing?  My PGP decrypter doesn't seem to deal
with it (it didn't verify your signature).

 > -----END PGP DECRYPTED BLOCK-----
 > -----END PGP DECRYPTED BLOCK-----
 > -----END PGP DECRYPTED BLOCK-----
 > -----END PGP DECRYPTED BLOCK-----
 > 
 > | Joe Chou  <http://www.socrates.ucsf.edu/~jchou>
 > | http://devbio-mac1.ucsf.edu/joe.html
 > | Bargmann Lab, UCSF Department of Biochemistry
 > | PGP KeyID 0x3FA76F7D: at web page or public key servers
 > | PGP Fingerprint [004C 5A68 CC2F DA20 3999 3355 0E8D 7B3F]
 >