[Nottingham] signing a key

david at gbenet.com david at gbenet.com
Fri May 18 21:50:33 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----

On 18/05/12 22:11, Martin wrote:
> On 13/05/12 08:17, david at gbenet.com wrote:
>> Hi All,
> 
>> To the question "I attended a key party - so how do I set the trust and sign the
>> keys?
> [---]
> 
> Good comments there, thanks.
> 
> 
> Brief further details:
> 
> After a key-signing party, the crucial bits you need to add are:
> 
> For the intended victim's key, you need to add the trust level "I trust fully", and
> then sign the victim's key with /your/ key saying that you have checked all their
> details carefully (eg from seeing their photo-id paper documents).
> 
> Those actions can be done via Enigmail on Thunderbird with the OpenPGP menu options
> "Set Owner Trust" and "Sign Key". Firstly, check the victim's key details against the
> bits of paper you have from him/her by selecting the menu option "Key Properties".
> 
> Those menu options are available from the OpenPGP 'Details' on an email that has been
> signed by the victim, or by going into the OpenPGP Key Management and selecting their
> key that way. You need to import their key if you do not already have it.
> 
> Note that the "ultimate" level of trust is only for you for your own keys!
> 
> See:
> 
> Practical OpenPGP using GnuPG http://www.allgoodbits.org/articles/view/11
> 
> and:
> 
> OpenPGP Trust Models http://web.monkeysphere.info/doc/trust-models/
> 
> 
> Finally, email their signed trusted key to the email address shown in their key
> details, with the email encrypted with their key and signed by your key again. That
> should avoid the danger of being duped by a same-name imposter! (I wonder how many John
> Smiths there really are!)
> 
> 
> Hope that helps,
> 
> Cheers, Martin
> 
> 
> 
> _______________________________________________ Nottingham mailing list 
> Nottingham at mailman.lug.org.uk https://mailman.lug.org.uk/mailman/listinfo/nottingham
> 
Are you sober?
- -- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of death. No
delusion.” https://linuxcounter.net/user/512854.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEVAwUBT7bEHuJpqm7flRExAQElqAgAs5t4M734EjrhneqAiX2A8A8UpMUrnhRe
Vr05CFo6p4M2zyuca+IMgtoMjd3pn+wBAvg7gbDbSMGsOL9+F711G4TvlE+OS1Tn
d9I1uhjcL4guBKcmOJYl4KLuT5c+H5RYZyFpIJf8OXq9zTp+00fxGkHZBAK3iv9F
7TEO3I1brLf83CMktp3OPBW2csYkLMeuBk/FYx+pv7c3GGbiQXbKSR5XwIl2xLsr
Sw4hGQfKxKwkl1LmJIsGVxg0StxQHpLeZTmc5tr2bMgQEr4FLJ65lz+8hx1suc7n
CXM1dczkp8xc3QftCZDaQeKnn6wvtOeOpl5BuSdqPVOycwIjIolMuQ==
=Ftnz
-----END PGP SIGNATURE-----



More information about the Nottingham mailing list