[Bug 44699] can't encrypt with gpg if the receiver's key is not signed

[Thomas Zander]

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
You are a voter for the bug, or are watching someone who is.
         
http://bugs.kde.org/show_bug.cgi?id=44699         




------- Additional Comments From zander kde org  2006-01-19 00:11 -------
On Tuesday 17 January 2006 22:05, Thiago Macieira wrote:
> Why would you send an encrypted mail to someone if you don't even have
> a remote idea if the key belongs to that person?


I'm not communicating to a remote party based on the flesh-and-blood 
image, I'm communicating to him/her based on his/her gpg-key and 
connected email address.

Saying I have to figure out the flesh-blood person connected to it in 
order to figure out if I should trust his/her online identity is thus 
ludicrous, its one step too far and is based on false assumptions (namely 
that I start with a person and connect his online identity to that).

This trust model that the KMail people based this on thus forgets to take 
into account the anonymous idea of the disconnected internet and how its 
more often then enough to talk to an pgp-ID and have no idea who is 
behind it.