Re: Announcing Bellcore's Trusted Software Integrity (Betsi) System

[cactus@bb.com (L. Todd Masco)]

I've revised my opinion: It's not close to useless, it's worse than
 useless.

Two things people seem not to be getting:

	1. Including the fingerprint with a signed message is much less
		pointless.  This was distributing the fingerprint *with
		the public key*.  That's bogus. However, even were
		this a signed message rather than a key...

	2. Encouraging people to trust the included ASCII fingerprint is
		a Bad Thing.  Why not just include these fingerprint
		things and not bother with this confusing, patented
		RSA stuff?  Much easier that way.

Great.  Here's the Betsi key, with the fingerprint included for those
 who don't want to use PGP to do the computation.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.7

mQA9Ai5iKZAAAAEBgMAWW4+5FhyI3A5g4BT7bX8HwC6Ql4rwD/VlCNZnWZefReA5
CMJ+ot/oLrWaACcuJQAFEbQWQmV0c2kgPGNlcnRpZnlAYmIuY29tPg==
=9juv
-----END PGP PUBLIC KEY BLOCK-----

Fingerprint:

5F 34 26 5F 2A 48 6B 07  90 C9 98 C5 32 C3 44 0C

[Security or ease of use.  Choose one.]
-- 
L. Todd Masco  | "Which part of 'shall not be infringed' didn't
cactus@bb.com  |   you understand?"