December 15, 2004 Archives

PGP Inc setup a "Verified Key Service". How did I find out? Because they sent me semi-spam mail to "verify my key". Not a good start...

Curious I went to their site and told them not to add the key ID they sent me, as it's a key I don't use.

I tried to add my pgp key to their server, but they told me that they don't support "v3 or older" keys. I've had my key since 1996 and I'd really rather not go through the hassle of changing it, thank you very much. (On a side note: I have considered it though, it being only 1024 bits and all).

Anyway, that's not the foolish thing. The point of PGP is that by encrypting and signing the keys, we don't have to trust that the other end of the communications email address has not been compromised. However, the "verified key service" pseudo-"verification":https://keyserver-beta.pgp.com/vkd/Verification.event is relying on, tada, that your email account hasn't been compromised. They are just sending an unencrypted email to your email account and asking you to click the link. No sending a signed mail back or being able to decrypt an encrypted mail.

Is it worse than the regular PGP key servers? Technically no. The difference is that the regular key servers are not claiming to have "verified keys" other than your regular web of trust.

Someone on the gnupg-users list argued that it's useful to weed out inactive keys, which I certainly agree with. But they shouldn't call it "verified keys", but "active keys" or some such.

A better another automatic email checker and signer: RobotCA. The RobotCA encrypts the email you are supposed to confirm and thus ensures that the reader of the email has the secret key and is able to use it.

We got moved last weekend. We got the last load hauled inside a little before eleven sunday night. To say we were tired would be quite an understatement. The old place had stairs up to the street. The new place has stairs down from the street. Stairs down are much easier, so unless one of our neighbors move I don't see how we can get out of here.

Almost two weeks ago when we got the keys and started doing work here and moving a few things, the gas was turned off and we tried to heat up the house a little with the fireplace. Not much luck with that! It was nice and warm right next to it, but it didn't heat up the house much. I would take a picture of the fireplace, but currently it's well hidden behind layers of boxes. It's built to look pretty with burning wood inside, not to actually make the house warm -- which when you think about it is about right most of the year here.

The guy from the gas company came last Wednesday to turn on the gas and he told that it was the coldest day in 90 years. No wonder we were so happy to see him.

Of course a few days later we were back to summer like temperatures.

I think I could feel moved in even with a pile of boxes in a corner just fine. If you consider having wireless covering the whole house all moved in, then we are all set. We haven't finished part of the house we'll use for office space, so I'm not yet setup properly with the powermac and big monitor and all that, rather just on my nice chair in one of the bedrooms with the laptop (mostly). Not so great, but the view out the window is nice.

We taught one of the cats to run up the stairs when we go in through the front door and say "up up up". If the door routine is more complicated than someone coming in through the door then she gets a bit confused about it, but other than that she learned it really fast. The other cat hasn't tried venturing down the stairs yet. She makes it to the first step and then hurries up again.

Having just an interim "office" made me setup the Airport Express to let us print from the laptops. Maybe Apple aren't perfect, but they sure know how to make things easy.