🚀 go-pugleaf

pcl@ox.ac.uk (Paul C Leyland) writes:

> Here's what I suggest:

> David does *not* use PGP to issue a revocation certificate.  He
> broadcasts, on this newsgroup, his secret key, pass-phrase, anything
> he wishes, *without* using PGP.  He uses uuencode, for example, as an
> asciifier.  Vesselin likewise posts David's public key and anyone who
> is interested checks it against their own copy.  Once both are
> published, anyone can check that they are indeed a public-private
> pair.  Anyone in possession of both can then issue a revocation
> certificate.

That seems a perfectly reasonable solution to me... If David does not
intend to use PGP, then he shouldn't be concerned about the compromise
of his secret key. As a beginning, here is his public key:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.1

mQCNAirCBpQAAAEEAL9DFGfkb2Z6uDQWIv8+K0nGomgwokOuUjOlm0rP14qY5+Ui
yfk3fPEEjMaApwYNCBQIbQkR7limlP0+PCQwbF/qbFut83JA0D94317ZreR26uKO
GD7w19Ktp9lPVmLH1AiAQVozyrljLLahjPVKELmis62IqxlpIoiFcZa7sz5lAAUR
tCZEYXZpZCBTdGVybmxpZ2h0IDxzdHJubGdodEBuZXRjb20uY29tPg==
=98lY
-----END PGP PUBLIC KEY BLOCK-----

> I'll volunteer, if need be, as I don't believe possession and use of
> pgp *in my environment* is illegal or unethical.  I'd prefer others to
> do it (Vesselin?), as I've only just started to use pgp and I'm not
> fully confident that I know exactly what I'm doing.

I have not tried to use key revoketion sertificates yet, but it
doesn't seem that difficult at all... I just think that David might
prefer an idependent party to do the operation, but I would accept to
do it myself, if he agrees.

> Does this suggestion satisfy the honour of both parties?  Is it
> practical?

No problems from my side - I find the solution perfectly reasonable,
practical, and satisfactory. So, now it depends only on David.

Regards,
Vesselin
-- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.1 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany