<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Nicholas Bohm wrote:<br>
<blockquote cite="mid:4A816D39.4010205@ernest.net" type="cite">
<blockquote cite="mid:4A7ECBB7.3040303@ernest.net" type="cite">(Is
there a widely published HMG public key? If not, why not? There
was supposed to be an HMG PKI, and what's the use of that without a
public key? If there is a public key, does anyone know where it is and
how to check it's genuine?)<br>
</blockquote>
No answer being forthcoming, I've <a moz-do-not-send="true"
href="http://www.whatdotheyknow.com/request/the_public_key_to_the_government">asked
the Home Office</a> through WhatDoTheyKnow.<br>
<br>
</blockquote>
The Home Office replied (very promptly) to say that CESG is part of
GCHQ, and that accordingly the responsible department is the Foreign
Office.<br>
So I <a
href="http://www.whatdotheyknow.com/request/the_public_key_to_the_government_2">asked</a>
them.<br>
<br>
The FCO says it doesn't have the public key to the UK PKI. (This seems
to mean it cannot verify the authenticity of signatures made using it,
which must be awkward for it. I have not yet decided whether I believe
it.)<br>
<br>
Helpfully, it suggests I ask CESG, who, the FCO say, "will be able to
provide you with a copy of the Public Key Infrastructure."<br>
<br>
This is impressive, when all I want is the public key. I have asked
CESG, and will report further in due course.<br>
<br>
Nicholas<br>
<div class="moz-signature">-- <br>
<pre class="moz-signature" cols="72">Salkyns, Great Canfield, Takeley,
Bishop's Stortford CM22 6SX, UK
<i>Phone</i> 01279 870285 (+44 1279 870285)
<i>Mobile</i> 07715 419728 (+44 7715 419728)
<i>PGP public key ID:</i> 0x899DD7FF <i>Fingerprint:</i>
5248 1320 B42E 84FC 1E8B A9E6 0912 AE66 899D D7FF</pre>
</div>
</body>
</html>