Public Keys and the Web Page.

[Ross Anderson]

> Surprisingly, I looked for a top-level public key (or at least a
> fingerprint) on www.thawte.com and did not find one (also, their
> top-level PGP signing key is poorly attested in the usual PGP key
> sites).

Look at the Global Internet Trust Register - Thawte have an A on that.
They also have an A in the previous, 1998, edition (which is available
online free).

More at http://www.cl.cam.ac.uk/Research/Security/Trust-Register/index.html

Ross