gabriel rosenkoetter on 5 Feb 2004 05:24:02 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Post-meeting PGP signing instructions. 

On Wed, Feb 04, 2004 at 11:34:36PM -0500, gabriel rosenkoetter wrote:
> - Now that you have a copy of their public key in your keyring, you
> need to verify that nothing shady is going on (either in the
> transmission of their key or in someone misrepresenting themselves--
> which I *highly* doubt happened, based on experience). You do that
> by verifying that the fingerprint of the key you've downloaded
> matches that on the slip of paper you got from the real person the
> key represents. Every single character needs to match here. This is
> the MOST IMPORTANT STEP in keysigning.

And, given that it's SO IMPORTANT, I should probably say how to do
it.

  gpg --fingerprint keyid

Apologies for missing that, thanks to Walt for pointing it out.

-- 
gabriel rosenkoetter
gr@eclipsed.net

Attachment: pgpiOUstH9Wd7.pgp
Description: PGP signature