> If you meet me in person and I say "I'm sgentle", that's a weaker proof than if I post a comment from this account. That's why (for PGP) you, as an assurer,

> If you meet me in person and I say "I'm sgentle", that's a weaker proof than if I post a comment from this account. That's why (for PGP) you, as an assurer, generally don't upload the signature yourself but send it to the e-mail address the assuree claims to own. The proof that they own that account is that they are able to receive the mail with the signature. They can then publish it themselves.