From: lwp@mail.msen.com (Lou Poppler)
Date: Mon, 4 Sep 95 14:08:41 PDT
To: Hal <cypherpunks@toad.com
Subject: Re: pseudonyms & list health
In-Reply-To: <199509040451.VAA23173@jobe.shell.portal.com>
Message-ID: <NI2SwMz2BgTU083yn@mail.msen.com>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

On Sun, 3 Sep 1995 21:51:21 -0700, Hal <hfinney@shell.portal.com> wrote:

} An interesting point.  I have long wished that there would be a form of
} "credential certificates" which people could give as special signatures
} on other people's public keys.  Then using Chaumian credential technology
} it would be possible to anonymously transfer these credentials from one
} pseudonym to another.
/.../ 
} I certainly appreciate these kinds of comments, but it would be even
} more useful if such messages were expressed as the kinds of
} certificates I am describing.  I wonder whether people would be willing
} to use a program which would let them issue such "reputation
} signatures" of various kinds, and display the signatures which were
} present on keys.
/.../ 
} I could see such a system initially being piggybacked on PGP keys (the
} signatures would not be understandable by PGP though), although for
} Chaumian credential transfers the keys have to be specially structured
} and that would require a new approach.

When the list was discussing "key as final authority" a while back,
Wei Dai posted (on May 31) a program called 'addid' which allows one
to add arbitrary strings as user IDs on other peoples' pgp keys.
These appear just as though PGP had added them itself, and are signable
and displayable by regular old PGP.

As an exercise, I grabbed Hal's "insecure key" from the keyserver,
and used 'addid' to add a new ID to it, which I then signed.

Here's the output of 'pgp -kc 0xcbd301':
Key ring: 'pubring.pgp', looking for user ID "0xcbd301".
Type bits/keyID    Date       User ID
pub   512/4ECBD301 1994/11/29 Hal writes good posts -- Read them all
sig!      2C48CAE9 1995/09/04  Lou Poppler <lwp@mail.msen.com>
                              Hal Finney insecure key
sig!      58214C37 1994/12/01  Hal Finney <74076.1041@compuserve.com>

(If anyone cares) here is Hal's key cbd301, as summarized above:
- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.2
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=xEr2
- -----END PGP PUBLIC KEY BLOCK-----


here is my key 48cae9, which signs the above new ID (and this mail):
- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.2

mQCNAiyLuS0AAAEEALvPIvz5q0PzIEvuAmyIXPz89jG8jB5tcRl5itVNVhvqTL9/
Z+dlfBHvzL5d7FpTj3qPxe7tDFsH/MB1JJV/DhhLSAzvoyg8cEDkFJhwPihrytGK
xgTgdO3NYL0Pq5o6Kk86LqVpRO8LamKM9sJgQGn6q9t+vbtHdGpfQFwsSMrpAAUR
tB9Mb3UgUG9wcGxlciA8bHdwQG1haWwubXNlbi5jb20+iQCVAwUQL+6zzGpfQFws
SMrpAQHAMwQAuzbPEV2JP6nUKKP8v1qRAQELvz4GfH++B6XwzxTmiz65kkfC/uOz
LB9MIe/VNrulriTUGI3U0FjfuaSvJLQq92t434NK9/SXAfK6iemq9Bz7Pb8/iuB7
VfMTR8+Yvda8zScX6Rms49zmyOf8vC1n+4C0kJsKSlw+gy8GuaxSLZ6JAJUDBRAv
vAPCG46b4I3URvEBAZwfBACNXe36MeaLcJIVvSQz4/1Iz7Iqy8ukS2xoG7fJGPvx
DHjDYMn2xFtGF16IRKN8UuIpldfY1fFU5CI9vLCEqd5katbRrnZjcpF2Vp0QC3nP
egpDlXYUOe9kwSjIOdUIlCQn0lTIxqGSzT8hCKxn8i0HD1hSa2NtREptf8pUH3Ln
Ig==
=w+eq
- -----END PGP PUBLIC KEY BLOCK-----


::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   Lou Poppler  <lwp@mail.msen.com>   |    Doom an evil deed,           ::
::     http://www.msen.com/~lwp/        |     liven a mood.               ::
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMEtoa2pfQFwsSMrpAQGDAwQAjrdHWqJSsI5WB9exvJZf21mVZwCjaGuH
XlK/e0+i6p3Zf8YYyY3EFP/gwL4191PhB2AG2gD77tI0ijG7GI8gD0nZQc3ZwH/C
N+zfgH9OOOVxu5CUKcuSBC8AgIu7RYdKb3WFqA+5QczjaWjKiz5XuviJoUg1QLGD
TemyBujRxhE=
=RYHl
-----END PGP SIGNATURE-----