My PGP key and my keysigning policy
If you need to communicate with me securely, please use my PGP public key to encrypt the message. If you think that it is important to me that I can verify who you are, do not forget to sign the message with your private key.
pub 4096R/E80D8F7F 2008-01-17
Key fingerprint = 95B3 4A1B B8BF E2F0 C230 B2BA 4E23 CAB8 E80D 8F7F
uid Kees (Cornelis Jan) Leune
uid Kees Leune
uid Kees Leune (Leune Consultancy, LLC)
uid Kees Leune (Information Security Officer, Adelphi University)
sub 2048R/9F895DE4 2009-01-05 [expires: 2010-02-01]
sub 2048R/EA3A45D9 2009-01-05 [expires: 2010-02-01]
My key signing policy is simple:
You may convince me in many ways; I do not always need to see some form of photo ID. For example, if I have known your for a long time and you ask me to sign your key, I will do so without needing to see your passport or driver's license.
If we have never met in person, I may still sign your key. However, it might be a little trickier for you to convince me that you are who you claim to be. However, if I have emailed, blogged, IM'ed, or IRC'ed with you for a long time, and your identity appears consistent throughout all those channels, I can be convinced that you are who you say you are.
If I do decide to sign your key, I will mail the signed public key back to you at an email address which I believe belongs to you. That message will be encrypted with the key I just signed and I will sign the whole thing with my private key. If you know how to deal with that email, and through my signature decide that it was indeed me who signed the key, it will be good enough for me.
Reciprocal signatures are appreciated!
Better is worse than good enough.
