
www.Usenet.com
| <-- __Chronological__ --> | <-- __Thread__ --> |
I am going to try to respond to all Mark Morin's concerns. First, the idea there can be only one key with an address is false. All that really matters is that a post is signed and you know who has the ability to sign it (which should be only one person unless someone did not guarded their private key -- which is unlikely). One page on Brad's web site ( the mypubKey2.htm ) shows he indeed claims the digital key used to sign the 'Brad' post _AND_ that he has the ability to sign with it. The idea of cut and paste forgery is just incorrect. Each post that is signed gets info. about he content that was signed in the signature itself. When you use the pgp software to verify a signature, IF the contents between the signing comment lines have been changed, the content will not come up as validly signed.
| <-- __Chronological__ --> | <-- __Thread__ --> |