trust your corporation for keyowner identification?

Pete Stephenson pete at heypete.com
Wed Oct 16 16:36:33 CEST 2013


On Wed, Oct 16, 2013 at 4:20 PM, Johan Wevers <johanw at vulcan.xs4all.nl> wrote:
> On 16-10-2013 15:28, Pete Stephenson wrote:
>
>> I would be reasonably sure that a key signed by an HR department
>> actually belongs to the named person,
>
> Although I would certainly NOT assume that that person would be the only
> one with access to the secret key. Most companies would keep a copy.

Good point. That would definitely throw a wrench in the system.

Cheers!
-Pete



More information about the Gnupg-users mailing list