[SWLUG] PGP Key Signing

[Kryptops]

On Mon, 2003-10-27 at 13:22, Telsa Gwynne wrote:
> On Mon, Oct 27, 2003 at 12:01:32AM +0000 or thereabouts, Kryptops wrote:
> > Hi all,
> > 
> > Just wondered if anyone would be interested in doing some keysigning at
> > the meeting on Tuesday. And, if so, would a passport be good enough ID?
> > :)
> 
> I use my passport for mine, yes. I have known people refuse to 
> sign them because "that picture doesn't look anything like you"
> though, so be warned :) I'll bring mine along too. Anyone
> else? 

My passport is pretty recent, but I'll bring my student ID's along as
well, just for good measure.

> If someone wants to post about how to do this properly, and then
> the exact step-by-step on signing and uploading after, that'd be
> great. I know opinions vary on the first one. Some people say you
> should exchange emails after exchanging keys, to check the things
> exist, for example; and others just sign away. 
> 
> I had a nice "step 1, step 2, step 3" thing for the uploading
> after, but nuked it with rm and * (as you do..). And I keep 
> forgetting now and having to do and dig around looking for the
> howtos and wotnot.

There are a few howto's on the Internet regarding this, but I suppose
it's up to the individual at the end of the day. There is the GnuPG
Keysigning Party HOWTO at
http://www.cryptnet.net/fdp/crypto/gpg-party.html, and this has some
handy tips.

> One thing more, though: you say PGP? I have a GnuPG key. I have
> no idea how I sign a PGP one. :)

When I said PGP, I meant GnuPG. But, PGP keys should be pretty
straightforward to sign, depending on whether they're OpenPGP compliant
of course. And, IDEA is still a problem for most of us GnuPG users,
becuase of patents.

Kryptops