PGP signatures.

[Anne Wilson]

On Thursday 29 May 2008 02:08, Tim wrote:
> On Wed, 2008-05-28 at 17:49 +0100, Anne Wilson wrote:
> > It is important, though, to maintain the web-of-trust.  It does have
> > legal implications, and that's why local signing is an option.  I use
> > encryption for correspondence with one person, and for that I have to
> > use ultimate trust, yet I've never met him.
>
> I don't recall being required to "ultimately trust" someone to send them
> encrypted mail.  I'd call that a foolhardy thing, too.  It'd be better
> to set your mailer to trust people on your keyring - that affects what
> you do with the keys, rather than inappropriately bodging the keys,
> themselves.
>
Since it is a local setting it has no security implications for anyone else.  
Local signing is designed to cope with situations like this.

Anne