Melissa wrote:
> It's a fair question to ask, and I'm not *entirely* convinced that my
> reasons are unquestionably sound, but I do still feel I have my
> reasons. I could tell you all about them in detail, but that could
> take a while as well, so for the moment I'll just say that it has to
> do with some very malicious identity spoofing I was the victim of
> some time ago.
unfortunately, the signatures do not prove that those messages posted
by someone else were not posted by you, they only prove that the
messages you've signed were posted by you...
further, nothing stops a malicious identity thief from signing the
spoofed messages... the only way to tell that they aren't signed with
your key is to actually fire up pgp and check - and almost nobody ever
bothers to do so... nor should they, since all it would really prove is
that the malicious messages were signed with a different key, not that
they were signed by a different person...
pgp clear-signing doesn't protect your identity the way you think it
does...
--
"we are the revenants
and we will rise up from the dead
we become the living
we've come back to reclaim our stolen breath"
>> Stay informed about: Panda Anti Virus 
FAQ
Profile
Private Messages
Log in
