PGP @ LWCE

Fellow Debian Developer, Jonathan Walther (aka SirDibos) asked me to post this. He has set up a document which explains the proper method for getting your PGP key signed. With Taco, Hemos, and others at LWCE, this is a great place to get your key signed. Read the document here. After the trojan scare awhile ago, people need to be aware of proper security techniques. DCLUG and NOVALUG will begin signing keys shortly, as well.

and why should we trust you?

[pez]

i mean how do we know that this isn't some diveant plot by microsoft and they gave you loads of money :)

Darnit...

[cduffy]

...I was hoping for info on getting my key signed by some trusted authority.

Hmm... s'ppose I'll have to get around to my planned visit to the local notary-public offices (there are several around here). That or convince the local LUG to do an official key-signing... unfortunetely, most of the officers consider PGP nothing but a pain.

now i can sound smart

[gavinhall]

Posted by Assmodeus:

wow..now i can sound smart to the people who ask me about pgp keys... whee...

PGP key what is this for anyway?

[josepha48]

.. okay this may seem like a stupid question, but I was always told that the only stupid question is the one not asked..

what are the pgp keys for? why do I need one or do I? and should I download the keys with the 2.2.x kernels? and if so what should I do with them once I have them on my system?

send mail here [mailto]

what day is it?!

[Jose]

the dates on this seem a little weird:
Posted by Justin on Monday February 29, @11:00AM
but the comments are dated:
Monday March 01, @12:10AM
a little weird =P

(oh and local time here is 01:56 EST)

Small detail

[Straker Skunk]

Might want to mention the new command convention in there... with the package I have (PGP 5.0), instead of pgp -kblah, pgp -vblah, it's pgpk -blah, pgpv -blah, etc.

Still, though, very helpful! We need docs like this to get strong crypto to the masses. Now if only there were as good a HOWTO for pgp4pine....

So don't trust them

[Sir Spank-o-tron]

Last I checked, you didn't care if the people who signed your key were actually trustworthy. You just want people to know your public key is what it seems to be. Key signing is a good way to get your key out there. Who cares who's got it? They can't do anything bad wit my public key, other than say 'yah, I met this guy, and this is his key'.

Spankmeister General