[SATLUG] what's this???

Daniel DiPaolo ddipaolo at strike.homelinux.org
Mon Aug 5 23:46:01 CDT 2002


On Mon, 2002-08-05 at 22:36, Bruce Dubbs wrote:
> Daniel DiPaolo wrote:
> >Anyway, GnuPG is the implementation of PGP that I use.  PGP is a PKI
> >(Public Key Infrastructure) implementation for encryption and other nice
> >things.  
> >
> Just to be picky, gpg (or pgp) is NOT a PKI.  It does use a public and 
> private key, but it does not support an *infrastructure*, which is a 
> methodology of verifying a public key.  The pgp methodology is referred 
> to as a 'web of trust'.
>   -- Bruce

Point taken.  Indeed there is no PKI inherent in PGP or GnuPG (which is
why you will find no mention of them in the pkiguru.com tutorial I
linked).  PGP and GnuPG keys can, however, be the instruments upon which
a PKI is based.  Sorry for the lack of clarity there.

-- 
Daniel DiPaolo <ddipaolo at strike.homelinux.org>
GnuPG key ID: 0xB2F23FC2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.satlug.org/pipermail/satlug/attachments/20020805/7ecfb943/attachment-0001.bin


More information about the Satlug mailing list