[Nottingham] signing a key
david at gbenet.com
david at gbenet.com
Fri May 18 21:50:33 UTC 2012
-----BEGIN PGP SIGNED MESSAGE-----
On 18/05/12 22:11, Martin wrote:
> On 13/05/12 08:17, david at gbenet.com wrote:
>> Hi All,
>
>> To the question "I attended a key party - so how do I set the trust and sign the
>> keys?
> [---]
>
> Good comments there, thanks.
>
>
> Brief further details:
>
> After a key-signing party, the crucial bits you need to add are:
>
> For the intended victim's key, you need to add the trust level "I trust fully", and
> then sign the victim's key with /your/ key saying that you have checked all their
> details carefully (eg from seeing their photo-id paper documents).
>
> Those actions can be done via Enigmail on Thunderbird with the OpenPGP menu options
> "Set Owner Trust" and "Sign Key". Firstly, check the victim's key details against the
> bits of paper you have from him/her by selecting the menu option "Key Properties".
>
> Those menu options are available from the OpenPGP 'Details' on an email that has been
> signed by the victim, or by going into the OpenPGP Key Management and selecting their
> key that way. You need to import their key if you do not already have it.
>
> Note that the "ultimate" level of trust is only for you for your own keys!
>
> See:
>
> Practical OpenPGP using GnuPG http://www.allgoodbits.org/articles/view/11
>
> and:
>
> OpenPGP Trust Models http://web.monkeysphere.info/doc/trust-models/
>
>
> Finally, email their signed trusted key to the email address shown in their key
> details, with the email encrypted with their key and signed by your key again. That
> should avoid the danger of being duped by a same-name imposter! (I wonder how many John
> Smiths there really are!)
>
>
> Hope that helps,
>
> Cheers, Martin
>
>
>
> _______________________________________________ Nottingham mailing list
> Nottingham at mailman.lug.org.uk https://mailman.lug.org.uk/mailman/listinfo/nottingham
>
Are you sober?
- --
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of death. No
delusion.” https://linuxcounter.net/user/512854.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQEVAwUBT7bEHuJpqm7flRExAQElqAgAs5t4M734EjrhneqAiX2A8A8UpMUrnhRe
Vr05CFo6p4M2zyuca+IMgtoMjd3pn+wBAvg7gbDbSMGsOL9+F711G4TvlE+OS1Tn
d9I1uhjcL4guBKcmOJYl4KLuT5c+H5RYZyFpIJf8OXq9zTp+00fxGkHZBAK3iv9F
7TEO3I1brLf83CMktp3OPBW2csYkLMeuBk/FYx+pv7c3GGbiQXbKSR5XwIl2xLsr
Sw4hGQfKxKwkl1LmJIsGVxg0StxQHpLeZTmc5tr2bMgQEr4FLJ65lz+8hx1suc7n
CXM1dczkp8xc3QftCZDaQeKnn6wvtOeOpl5BuSdqPVOycwIjIolMuQ==
=Ftnz
-----END PGP SIGNATURE-----
More information about the Nottingham
mailing list