Mark Schonbach on Tue, 19 Jun 2001 18:50:07 -0400


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] GPG - Keysigning


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The way GPG works, in a nutshell, is that you can create a key, but it
does you no good unless people trust you to be who you say you are.  For
example, I could very easily create a key saying I am Linus Torvalds, and
send forged emails to the LKML using this key.  But, since no one trusts
me, the forgery will easily be detected.  Therefore, it is necessary to
"sign" others' keys to trust them.  Take a look at these:
http://www.gnupg.org/gph/en/manual.html#AEN554
http://www.herrons.com/kb2nsx/keysign.html

which hopefully can explain better than I have.

On Tue, 19 Jun 2001, John Beck wrote:

> Hi everyone,
>
> What is the purpose of a keysigning?  I read all the information of PLUG's site, and looked at the information on http://www.gnupg.org/ but still am not sure on the purpose, or how it is used...?
>
> Thanks for your help!
>


Mark Schonbach, NetRealities
http://www.netrealities.com
PGPID: 2068B0F1 fp D161 176B 74FD D137 6B2C  052F D801 29A8 2068 B0F1


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (SunOS)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjsv1jQACgkQ2AEpqCBosPH7LwCdGANh1zle5VOMPn+1kAMSEB6w
IvAAnj8/ujEksGZckuiDu8iSJYv2HEmS
=o4E3
-----END PGP SIGNATURE-----



______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug