[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#259078: marked as done (http://www.debian.org/events/keysigning: 132s/key/fingerprint/)



Hi,

On Fri, Jul 16, 2004 at 03:47:32PM +0200, Gerfried Fuchs wrote:
> * Pierre Machard <pmachard@debian.org> [2004-07-15 08:55]:
> > On Tue, Jul 13, 2004 at 01:58:11AM +0300, Shaul Karl wrote:
> >> Package: www.debian.org
> >> Severity: normal
> >> Tags: patch
> >>
> >>   We can use the last eight hex digits of the *fingerprint* in this and
> >> other GnuPG operations and not the last eight hex digits of the *key*.
> >> Or am I wrong?
> 
>  This is only true for special keys....  In fact its the last eight hex
> digits of the *key ID*.  That they match the fingerprint for gnupg keys
> is a nice benefit, but not the rule for all keys.

Do you example of keys where this is not the case ?

>  The whole texting though is quite GnuPG centric, so I am not sure if
> this distinction is really needed here. Just wanted to raise the
> concern and that sometimes the last eight hex digits of the fingerprint
> doesn't help at all.

Probably, but I suppose that nearly everybody is using gnupg. A very few
people are using pgp those days.

> > You are right. I've just fixed it in the CVS. It should be available on
> > our website in several hours.
> 
>  Pierre, are you sure about this change that it is really better?

Yes it is. Because, it is sure that the last 8 digits are not those of
the key. In most cases these digits are the last 8 digits of the
fingerprint. Do not forget that in the beginning we were speaking of the
8 lastest digit of the key.

Cheers,
-- 
                                Pierre Machard
<pmachard@debian.org>                                 http://debian.org
GPG: 1024D/23706F87 : B906 A53F 84E0 49B6 6CF7 82C2 B3A0 2D66 2370 6F87

Attachment: signature.asc
Description: Digital signature


Reply to: