[Enigmail] Key Signing???

LeRoy Cressy ldc at lrcressy.com
Thu Jul 12 04:19:49 PDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

JAS wrote:
> I have had Enigmail for some time now to correspond back and forth with
> my brother in China. I run SM 1.11 and have 0.95.0 and have put my key
> on Biglumber and on a keyserver but do not understand about the key
> signing parties and such. Could some one explain on some of these matters?

A key signing party is where a group of people get together to sign each
other key.

The Philadelphia Linux User's Group (plug) has key signings at the end
of their meetings.

At a key signing party you take your drivers license and strips of paper
containing your keyid and key fingerprint.

like:
pub 1024 D/8501AFEA  2003-01-03 LeRoy D. Cressy (ldc) <ldc at lrcressy.com>
   Key fingerprint =  62DE 6CAB CEE1 B1B3 359A  81D8 3FEF E6DA 8501 AFEA
uid                           LeRoy D. Cressy (ldc) <leroy at lrcressy.com>
sub 2048 g/B16A47D6  2003-01-03
sub 2048 g/FBF1253E  2004-02-08
sub 4096 R/86B08B2A  2005-08-07
sub 4096 R/F4988EE7  2005-08-13

The above was generated by:
gpg-key2ps -p letter 0x8501AFEA > keysign.ps
gpg-key2ps is located in the Debian package signing-party

At the key signing party you pass around your key strips and your ID.
When you receive another persons photo ID along with one of their
fingerprint strips you have the opportunity to verify that the person is
who they say they are.

When you get home from the key signing party, the keys that you verified
the individual is who they say they are, you should edit their public
key and sign it using gpg --edit-key 0xkeyID

Next you will want to export the key to a file
gpg --export 0xKeyID > filename.gpg

Then email the signed key back to the owner so that he can import it and
 send it to a keyserver with your signature saying that you have
verified the individual is who they say they are.

I hope that this explains key signing parties and the purpose of signing
other's keys.


> 
> Thanks,
> 
> JAS


- --
 Rev. LeRoy D. Cressy  mailto:leroy at lrcressy.com   /\_/\
                       http://lrcressy.com        ( o.o )
                       Phone:  215-535-4037        > ^ <

gpg fingerprint:  62DE 6CAB CEE1 B1B3 359A  81D8 3FEF E6DA 8501 AFEA

For info on enigmail:    http://lrcressy.com/linux/mozilla.pdf
For info on gpg:         http://www.gnupg.org/

Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me. (John 14:6)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=LiV5
-----END PGP SIGNATURE-----


More information about the Enigmail mailing list