[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gnupg-devel
Subject:    Re: easy email encryption
From:       "Joel N. Weber II" <devnull () gnu ! org>
Date:       2002-10-23 17:26:15
[Download RAW message or body]

   How about using a locally controlled key server, say in a corporate
   network?  It wouldn't necessarily sync with public key servers, just
   serve employee keys.  Getting a one-to-one match for email address to
   key should work pretty well in this situation, correct?

I would expect that if you check for a trusted signature, it ought to
work fine.  Most keyservers I'm familiar with don't come with any real
security mechanism, and checking for a trusted signature is still
likely to be a little bit more secure than assuming that your
ldap over tls server isn't compromised, if the machines used to handle
the trusted keys are kept very secure.



_______________________________________________
Gnupg-devel mailing list
Gnupg-devel@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-devel
[prev in list] [next in list] [prev in thread] [next in thread]