PGP & GPG

122 Chapter 8

I visit the Web of Trust pathfinder at www.cs.uu.nl/people/

henkp/henkp/pgp/pathfinder (Google’s first result) and

enter the keyid of the message I received and my keyid. This

server tells me that there are eight disjunct paths between this

key and mine. In other words, my key is linked to the other key

by eight different paths that have no people whatsoever in com-

mon. For that key to be fake, the faker would have had to fool

a whole lot of people. Although I have never met Phil Zimmer-

mann, I would believe that this key is legitimate. (If the only

path had been through one of my incorrigible practical joker

friends, or if there had only been one path, I would have been

far more suspicious and infinitely less trusting.)

Most of these ...