Jeff Abrahamson on Thu, 27 Feb 2003 16:11:05 -0500


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] GnuPG 1.2.1 trustdb checks for every pubkey import?


On Thu, Feb 27, 2003 at 03:40:17PM -0500, Eugene Smiley wrote:
> 
> Gabe wrote:
> > On Thu, Feb 27, 2003 at 02:21:43PM -0500, Jeff Abrahamson wrote:
> >> This advice *sounds* good, but is bothersome in its own way
> >> because Mutt says
> >>
> >>   gpg: Signature made Thu 27 Feb 2003 01:12:16 PM EST using DSA
> >>   key ID 49E1CBC9 gpg: Can't check signature: public key not found
> >>
> >> Moreover,
> >>
> >> jeff@asterix:Mutt $ gpg --list-sigs |grep  49E1CBC9
> >> jeff@asterix:Mutt $ gpg --list-sigs |grep  -i shaw
> >> sig 2   P   99242560 2002-11-09   David M. Shaw
> >> <dshaw@jabberwocky.com> [...] jeff@asterix:Mutt $ gpg --recv-keys
> >> 49E1CBC9 gpg: no valid OpenPGP data found.
> >> gpg: Total number processed: 0
> >> jeff@asterix:Mutt $
> >
> > What keyservers have you tried?
> 
> This won't matter... This is the subkeyID for the singing key the keyserver
> don't handle multiple subkeys properly... He's posted it to
> http://www.jabberwocky.com/key.asc.

That key has id 99242560. 

I do suspect, however, that the email came from the real David Shaw.
But among plug gpg'ers, I couldn't let a secret other key id go
without mention.


> I believe he's the real David Shaw. ;) Question is, since you and I
> have never met, do you believe I am me?

Actually, we have met, Eugene, at David's gpg talk. And I signed your
key id A7EDFD2F on 2002-12-25. You signed my key on
2002-12-20. Apparently the real Eugene Smiley and I have met. ;-) (I
think we also may have met at the key signing after the January or
February meetings.

Maybe this is related to why mutt (via gpg) claims the signature on
your message is not good. Or maybe it's Outlook. How odd, anyway.


> > It'd still be nice to see some cross-signing and propogation of the
> > key, though.
> 
> Import the key above... It's signed by PLUG members including Jeff if I
> recall.

But isn't the same key.

-- 
 Jeff

 Jeff Abrahamson  <http://www.purple.com/jeff/>
 GPG fingerprint: 1A1A BA95 D082 A558 A276  63C6 16BF 8C4C 0D1D AE4B

Attachment: pgpjqUkLJsVzB.pgp
Description: PGP signature