——-BEGIN PGP SIGNED MESSAGE——-
I Think I’m Paranoid
Valid PGP/GPG fingerprint for email@example.com: 324BEE81A275E619 (http://pgpkeys.mit.edu/pks/lookup?op=get&search=0x324BEE81A275E619 …)
Valid OTR fingerprints for XMPP firstname.lastname@example.org: 8E9AAE8B 4FA5DB01 1822FA86 39DC88BD 0C7F2A53, ACFD2773 516A9316 07FCA6BB 3A68EA42 CB94BAC8
Valid OTR fingerprints for AOL IM name “Adrian”: 33064AF2 23085A61 390E7C10 3C238FFF 000D7A35, C5661329 906CC084 9B6A7251 ACA2F0B3 489BBD52
This information is valid as of 03/09/2014. Please consult it before accepting a new fingerprint from me. Changes in this space will always be PGP/GPG-signed. If signature is suspect (or key has changed), see paragraph below.
If you suspect my I may be compromised, contact me for validation with at least two out of the following methods. The same applies for receiving new OTR/PGP keys from me directly, although non-suspicious key submission may only require one verification method. Use your best judgment.
1. Photo/video of me with handwritten sign or speech attesting unambiguously to validity (as a last resort only, please).
2. Voice call *from* you to me in which I confirm changes. You must already have a number for me in the 202 or 410 area codes, and calls should be arranged in advance, as I do not carry a cell phone.
3. Postcard sent US mail from me to you containing new data.
4. PGP or S/MIME signed message vouching for fingerprint [only for vouching for OTR]
5. OTR confirmation from unchanged name/fingerprint. [Only for vouching for PGP].
If the above did not make sense to you, please do not direct your queries directly to me. Instead, first read the following:
And watch this:
After doing these things, if you still have a question, consider posting it to the 2600 Magazine Facebook group:
If all that fails, give it some time, and come back when you’ve caught up more on the subject. Maybe in a month, maybe in a year. Time will tell, and if you can teach yourself to figure out whatever was confusing you here, odds are the next time you can figure out your next problem without having to resort to outside help. Won’t that be nicer?
Errors or suggestions? http://adrian.lamo.org/ask
——-BEGIN PGP SIGNATURE——-
Version: GnuPG v1.4.11 (GNU/Linux)
——-END PGP SIGNATURE——-