My PGP key and my keysigning policy

If you need to communicate with me securely, please use my PGP public key to encrypt the message. If you think that it is important to me that I can verify who you are, do not forget to sign the message with your private key.

pub   4096R/E80D8F7F 2008-01-17
      Key fingerprint = 95B3 4A1B B8BF E2F0 C230  B2BA 4E23 CAB8 E80D 8F7F
uid                  Kees (Cornelis Jan) Leune
uid                  Kees Leune 
uid                  Kees Leune (Leune Consultancy, LLC) 
uid                  Kees Leune (Information Security Officer, Adelphi University) 
sub   2048R/9F895DE4 2009-01-05 [expires: 2010-02-01]
sub   2048R/EA3A45D9 2009-01-05 [expires: 2010-02-01]

My key signing policy is simple:

If I am reasonably convinced that you are who you claim you are, I will sign your key.

You may convince me in many ways; I do not always need to see some form of photo ID. For example, if I have known your for a long time and you ask me to sign your key, I will do so without needing to see your passport or driver's license.

If we have never met in person, I may still sign your key. However, it might be a little trickier for you to convince me that you are who you claim to be. However, if I have emailed, blogged, IM'ed, or IRC'ed with you for a long time, and your identity appears consistent throughout all those channels, I can be convinced that you are who you say you are.

If I do decide to sign your key, I will mail the signed public key back to you at an email address which I believe belongs to you. That message will be encrypted with the key I just signed and I will sign the whole thing with my private key. If you know how to deal with that email, and through my signature decide that it was indeed me who signed the key, it will be good enough for me.

Reciprocal signatures are appreciated!

Better is worse than good enough.