Re: [Ayatana] [Starfish-team] Secure Identity Design

[Scott Kitterman <ubuntu@xxxxxxxxxxxxx>]

"Paul Tagliamonte" <paultag@xxxxxxxxxx> wrote:

>On Mon, Jun 21, 2010 at 4:14 PM, Scott Kitterman <ubuntu@xxxxxxxxxxxxx> wrote:
>>
>>
>> "David Hamm" <davidthamm@xxxxxxxxx> wrote:
>>
>>>"Making friends with others" This "Starfish" sounds like a much bigger and
>>>more important feature then at first thought. Is this going to
>>>be integrated into ubuntu one?
>>>
>>>One of the best things since buttered toast is being able to sync user
>>>information across platforms, and the ease of contacting/accessing other
>>>peoples information securely.
>>
>> This needs to be handled very carefully. GPG web of trust is about trusting identity to be accurate. It's got nothing to do with social media concepts like Facebook friends.
>
>Absolutely.
>
>I'd love to integrate with Ubuntu one ( holding the public half ) but
>the private half should always be maintained in such a way that it is
>never transmitted over the Internet, when possible.
>
>Most of this will talk with LP, but I think there is a better then
>average chance it will talk with Ubuntu one. IMHO.
>
My comment wasn't about keeping secret keys secret (although that is also important).  It was about the criteria for marking someone else's key as trusted. 

Scott K