User attributes and audio IDs (was: Trouble signing)
Richard Laager
rlaager@wiktel.com
Sat May 17 04:06:04 2003
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
David Shaw wrote:
> On Sat, May 17, 2003 at 12:05:42AM +0200, Manuel Samper wrote:
> > David Shaw, on Fri, May 16 2003 at 20:24, wrote:
>
> > > I've been making a list of potentially useful attributes
> (images other
> > > than JPEG, audio clips ("Hello! My name is XXXX and my
> fingerprint is
> >
> > Cool! But appart from this, I cannot see much more utility
> right now...
Well, this could be useful for voice verification of fingerprints. One
could then match the user on the phone to the key or something like that.
;-) I don't know how much it would be worth though.
> Yes. It doesn't lower security (it's just a different sort of ID),
> but I can't think of any really good uses for it except the coolness
> factor. Then again, it could be argued that photo ID is just a cool
> trick also. Since you can't actually select a key via a photo ID, it
> isn't really a good user ID.
There's no reason you couldn't select a key by a photo id in a GUI
environment. Simply show a bunch of photos and let the user choose.
Personally, I'd really like to see a keyserver interface that shows things
like this. I think that would be a great application of photo IDs.
===========
| | pub 1024D/5E1F1BCE 2000-12-01 Richard James Laager (...)
| <...>
| | Key fingerprint = 03D4 AED7 0990 0162 EDF5 5183 6DF5
| 5E1F 1BCE
| | uid Richard James Laager (...)
| <...>
| PHOTO | uid Richard James Laager (...)
| <...>
| | uid Laager, Richard James <...>
| | uid LAAG0007 <...>
| |
===========
BTW David, did you happen to have any thoughts on the handling of photo IDs
with revoked self-signatures, etc. as I talked about in a message a few
days ago? The same issues would likely apply to the other types of
non-traditional uids.
Richard Laager
-----BEGIN PGP SIGNATURE-----
Version: 6.5.8ckt http://www.ipgpp.com/
iQA/AwUBPsWHGW31OrleHxvOEQIoaACcCLABEosUOkc6Lyb4NE+K74niDXcAniuX
H93B3e6v896Qs0GjnPipV/6z
=7qdP
-----END PGP SIGNATURE-----