[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: gpg key signing protocol question



> hey all,
> 
> so last night at the LISA 2002 conference in philly there was
> quite a nice keysigning get-together, at which i exchanged
> something like a dozen or two keys with other folks.  now previously,
> when i had signed keys with close friends, we'd just end up doing a
> bunch of gpg --sendkeys and gpg --recvkeys and eventually stuff would
> just kind of work, but i've gotten the impression that there's a
> standard protocol for signing folk's keys--involving mailing the signed
> key back to the owner of the key--is that the case?  if so, what's the
> specific process i should take? (specific commands would be great too:)
> 
> thanks,
> --sean
> 
Hey Sean,
What I've done so far this morning is:
gpg --recv-key <ID>
gpg --edit-key <ID>
gpg-mailkeys <ID>
gpg --send-keys <ID>
That way, everybody gets a copy of their signed key (which is the sorta
supposed to way), and I also export their key with my new signature to
the mirrors.  The advantage of emailing it to them is that they can
merge it in immediately, instead of waiting for it to propogate through
the mirrors.  I don't personally care about the lag time, but some do.

Steve
-- 
Stephen Gran
steve@lobefin.net
http://www.lobefin.net/~steve

Attachment: pgpo4OBbsOp4W.pgp
Description: PGP signature


Reply to: