Re: OT: More about GPG signing

[Rob Owens <rowens@ptd.net>]

On Thu, May 10, 2012 at 04:14:12PM +0100, Tony van der Hoff wrote:
> On 10/05/12 15:27, Phil Dobbin wrote:
> > Cheers,
> > 
> > Phil...
> 
> So, this message was signed.
> 
> Having recently installed enigmail, to see what all the fuss is about
> in the other thread. I find I'm at a loss to understand how to
> interpret this.
> -------------------------------------------------
> OpenPGP Security Info
> 
> Unverified signature
> 
> gpg command line and output:
> /usr/bin/gpg
> gpg: Signature made Thu 10 May 2012 15:27:47 BST using RSA key ID A093C263
> gpg: Can't check signature: public key not found
> -------------------------------------------------
> 
> Am I expected to go to some keyserver to find the sender's public key?
> How, where, why?
> 
I believe IceDove's enigmail preferences allow you to specify
"automatically fetch public keys" or something to that effect.

You need to click on the "Display Expert Settings" button and then go to
the keyserver tab.

Or you could manually download all the public keys that you're interested in.

-Rob