key-signing for pseudonyms

[Kyle Hasselbacher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, May 15, 2004 at 02:05:47PM +0200, Thomas Sj?gren wrote:

>if you use a pseudonym, why attach a photo? doesnt that break the idea
>of pseudonyms?

Pseudonym != anonymity.  Say I use a pseudonym online for some time, and I
gain a (good) reputation with that name.  I decide to "come out" and
associate myself with the pseudonym I use.

In answer to the original question, I'd verify just the email address and
give a weak (persona) signature.  The easiest way to do this is to sign the
key, encrypt the signed key WITH that key, and email it to the address on
the key.  Delete your local copy.  If it doesn't arrive, or the address
holder doesn't have the secret key, the signature never appears.

Ultimately how you "verify" such an identity is entirely up to the signer.
- -- 
Kyle Hasselbacher | It pays to be obvious, especially if you have
kyle at toehold.com  | a reputation for subtlety. -- Isaac Asimov
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAphH310sofiqUxIQRAuZvAKCworwVFhh1EoZBLTIqfWcrXRv5MgCgzfbS
i6s1o1Gh1am7AW9WzkbQlPQ=
=Olb0
-----END PGP SIGNATURE-----