Quote from: russ on January 22, 2013, 09:15:51 AM

Quote from: molecular on January 22, 2013, 08:46:48 AM

Quote from: casascius on January 21, 2013, 11:05:48 PM

If MtGox could make it so that you could add your PGP public key and then configure your account such that bitcoin withdrawals require PGP signature of a pre-generated message that contained the destination bitcoin address, MtGox would have undisputable conclusive proof in the event of a disagreement as to whether a withdrawal was authorized.

However: what's the difference of having ones password stolen and having ones pgp key stolen and passphrase key-logged?

The difference is the attacker wouldn't have the PGP private key.

By PGP key he would mean the private key, of course. Who needs to steal public keys?