Quote:
Originally Posted by pilotbob
The problem with PublicKey/PrivateKey is that you are incharge of the private key. If YOU want to keep the encrypted stuff safe then you keep the private key safe. But, if you don't care, then you can just share your private key.
Of course, a file encrypted with a public key is tied to that key. So, you can always see what public key it was encrypted with and look it up on the key server to see who it belonged to. If the private key for that signature was being shared the key generator could be "delt" with.
|
If you provide bogus private info when you create the key, you don't care about giving it away, and it's easy enough to avoid being caught... and it's too easy to use bogus info. If it was tied to a verifiable number that was your personal ID, and something you did NOT want others to have (like your SSN), it would be more secure by virtue of your not wanting to reveal it.