<p dir="ltr">I use the WoT heavily for vetting keys used for package signing. <a href="http://pgp.cs.uu.nl/">http://pgp.cs.uu.nl/</a> is particularly handy for eyeballing trust paths to the signers. More paths and shorter lengths give increased confidence. </p>
<p dir="ltr">I believe I've used the WoT to vet a key or two for email, but not as often as for code signing. </p>
<p dir="ltr">-- R; <><<br></p>
<div class="gmail_extra"><br><div class="gmail_quote">On Oct 4, 2016 6:07 PM, <<a href="mailto:jep200404@columbus.rr.com" target="_blank">jep200404@columbus.rr.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Mon, 3 Oct 2016 21:16:30 -0400, Rick Troth <<a href="mailto:rmt@casita.net">rmt@casita.net</a>> wrote:<br>
<br>
> I'm kind of fond of the PGP "web of trust".<br>
> These key signing parties are how we extend it.<br>
<br>
How much do you use that web of trust with folks<br>
that you have not exchanged keys in person?<br>
______________________________<wbr>_________________<br>
colug-432 mailing list<br>
<a href="mailto:colug-432@colug.net">colug-432@colug.net</a><br>
<a href="http://lists.colug.net/mailman/listinfo/colug-432" rel="noreferrer" target="_blank">http://lists.colug.net/<wbr>mailman/listinfo/colug-432</a><br>
</blockquote></div></div>