Jeff Abrahamson on 9 Feb 2004 13:31:02 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] Jeff's own paranoia


On Sat, Feb 07, 2004 at 02:10:40PM -0500, David Shaw wrote:
> Something that he signed...

I signed David's key (having met him, verified id, exchanged arbitrary
text strings, etc.), and mutt reports (at the top)

  gpg: Signature made Sat 07 Feb 2004 02:10:40 PM EST using DSA key ID 49E1CBC9
  gpg: Good signature from "David M. Shaw <dshaw@jabberwocky.com>"

but at the bottom of the message mutt provides the warning

  PGP signature could NOT be verified.

I confirmed that I have signed David's key:

  jeff@asterix:Mutt $ gpg --list-sigs 49E1CBC9|grep jeff
  sig -       0D1DAE4B 2002-12-25   Jeff Abrahamson <jeff@purple.com>
  jeff@asterix:Mutt $ 

Why do I get two different statements of trust on this message?

-- 
 Jeff

 Jeff Abrahamson  <http://www.purple.com/jeff/>
 GPG fingerprint: 1A1A BA95 D082 A558 A276  63C6 16BF 8C4C 0D1D AE4B

Attachment: pgpejzJFMtgNE.pgp
Description: PGP signature