[Freedombox-discuss] the FreedomBox 'bump' challenge

[Heddle Weaver]

On 14 June 2011 14:30, Stefano Maffulli <stefano at maffulli.net> wrote:

> hello folks,
>
> Exchanging public keys and signing them is still a complicated matter
> for normal users. As part of the development of FreedomBox we are
> thinking of a simple way to establish trust and enable two people talk
> to each other through secure cryptographic means.
>
> One possible scenario is the following: User Jane meets her friend Ken,
> they 'bump' their phones and by doing so they exchange not only their
> private information (vcard, GPG keys) but also establish a high degree
> of digital identity trust. The updated status of 'trust' can be then
> transmitted back from the phone to their respective FreedomBoxes,
> securing future communication between Jane and Ken.
>
> What are your thoughts on this idea?


Dependent on how it was done.
What are the chances, being picked up by authorities, of the authority
figure getting a read on his FreedomBox and being privy to all conversation
from there on in.
Not easy to facilitate for one without the other.

Another way would be to create clear documentation for how a key is
generated.
It's trivial now through most OS mail clients.
Regards,

Weaver.
-- 

Religion is regarded by the common people as true,
by the wise as false,
and by the rulers as useful.

— Lucius Annæus Seneca.

Terrorism, the new religion.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/freedombox-discuss/attachments/20110614/bce3530b/attachment-0001.html>