[KLUG Members] gpg key signing party.

Bruce Smith bruce at armintl.com
Mon Feb 20 09:18:39 EST 2006


OK, I have my gpg key created and working.  I added a couple of my other
emails to my key (adduid), but I'm undecided about which ones to add.

This leaves me with some questions about wwwkeys.us.pgp.net.

1)  How spam proof is it?  Can spam bots harvest emails from it?

2)  What if I upload my public key now, and change my mind later about
my email addresses (I run adduid/deluid later).  I can I change my key
on the server?  How?  Can I upload it again and overwrite it?

3)  If I can change my key on the server, what keeps other people from
changing my key?

All I see is the place to upload a key, but nothing on how to change or
delete a key, nor any security on the key uploaded. I don't get it!  :-)

 - BS


> I have in my ~/.gnupg/gpg.conf
> 
> keyserver  hkp://wwwkeys.us.pgp.net
> 
> It is there.
> 
> Dirk
> 
> On Fri, 2006-02-17 at 11:22 -0500, bill wrote:
> > Hi Dirk,
> > 
> > Where is your public key?
> > 
> > kind regards,
> > 
> > bill
> > 
> > On Fri, 2006-02-17 at 10:55, Dirk H Bartley wrote:
> > > Greetings
> > > 
> > > Don't forget to send me your key fingerprint.  The only responder I've
> > > had so far is me.
> > > 
> > > Dirk
> > > 
> > > 
> > > On Sat, 2006-02-11 at 15:46 -0500, Dirk Bartley wrote:
> > > > Greetings members.
> > > > 
> > > > This is a call for everyone to prepare for the key signing party in one
> > > > week and a few days on 2006-02-21.
> > > > 
> > > > What to do.
> > > > 
> > > > Send me your key information so that I can compile a list of keys for
> > > > people to confirm the identity of the key.
> > > > 
> > > > If you have not generated your key yet execute the command
> > > > gpg --gen-key  (page 12 of the presenation linked below)
> > > > or use your favorite gui such as kgpg
> > > > 
> > > > If you have more than one email addres, create multiple uids with the
> > > > adduid command.  See page 41 and 42 of the presenation.
> > > > 
> > > > Then send me your key fingerprint.  You can get your fingerprint with
> > > > the command gpg --fingerprint.  Then copy and paste the information
> > > > about YOUR key into your email client.
> > > > 
> > > > you can send me your information to my work email address
> > > > dbartley at schupan.com
> > > > 
> > > > Other things you can do:
> > > > 
> > > > Read the presentation to learn about gpg.
> > > > ftp://kalamazoolinux.org/pub/pdf/gpg.pdf
> > > > 
> > > > Read the key signing party how-to
> > > > http://www.cryptnet.net/fdp/crypto/gpg-party.html#ss3.1
> > > > http://www.cryptnet.net/fdp/crypto/gpg-party.html
> > > > 
> > > > Thank you and hope to see you a week from Tuesday.
> > > > 
> > > > Dirk

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.kalamazoolinux.org/pipermail/members/attachments/20060220/c7e6fabe/attachment.bin


More information about the Members mailing list