gpg: Signature made Sat Jul 1 08:25:00 2006 UTC using DSA key ID E425277B
gpg: Can't check signature: public key not found
Matthew Toseland wrote:
> The node which created the invite already
> knows the IP address of the computer the invite is being sent to
Does it? How?
> We may require some sort of out-of-band verification.
Unfortunately people will probably just include the password or key
fingerprint in the same email as the reference, or send it over the same
logged IRC channel. But there's not much we can do about that.
Maybe it should be possible to put refs and invitations inside
password-protected zip files for people who need to email them through
restrictive filters? Filtering an extra MIME type will be a 5-minute job
for China.
Cheers,
Michael
