From: "Marc J. McArdle" <markm@pgp.com>
Date: Fri, 24 Oct 1997 12:17:21 +0800
To: rfarmer@HiWAAY.net
Subject: Questionable Authenticity / Re: PRZ Announcement
In-Reply-To: <Pine.OSF.3.96.971023202351.6541A-100000@fly.HiWAAY.net>
Message-ID: <34501ADC.504E@pgp.com>
MIME-Version: 1.0
Content-Type: text/plain



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In order to clear up some confusion in regard to recent posts to
the cypherpunks and coderpunks lists, I would like to remind PGP
users that the only way to truly check the authenticity of any
message is by verifying the PGP signature of a message with the
copy on the PGP Key Server.

Now that we have Key Server technolgy fully developed, all of
the paranoid warnings in the original PGP documentation no longer
apply, as long as a person takes the time to compare message
signatures to the original keys held on the PGP Key Server.

Since PRZ sometimes spells his first name with _one_ 'l' and
sometimes with _two_, it can be confusing. Likewise, his
occasional spelling of his last name with _one_ 'n' and then
with _two_ on other occassions.
I vary the spelling of my own name--between 'Marc' and 'Mark',
and occasionally, 'Marck'--but as long as you can verify my
middle digital signature, you can be assured it is me sending
the message.

Please distribute this message as widely as possible, so that
PGP users realize that adhering to the principles espoused in
the original PGP documentation only makes us all look like a
bunch of paranoid lunatics.

Marck
~~~~~
"I can put my dick in my ear...can you?"

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQA/AwUBNFAZVxurK3YPheUYEQLhQwCdHlpQi3QrVchZu0pfHGWcTlb7TXEAoI/R
eeFnnXIvATOoSbAFmUVnmis9
=3MQh
-----END PGP SIGNATURE-----