Sign key and export for each UID

Doug Barton dougb at dougbarton.us
Mon Sep 16 22:29:10 CEST 2013


On 09/16/2013 01:20 PM, Pete Stephenson wrote:
> On Mon, Sep 16, 2013 at 9:45 PM, MFPA <expires2013 at ymail.com> wrote:
>> On Monday 16 September 2013 at 7:57:04 PM, in
>> <mid:52375480.7020606 at dougbarton.us>, Doug Barton wrote:
>>> I have another philosophy that works for me because I
>>> prefer not to sign uids that are not valid.
>>
>> What, in your opinion, makes a UID "not valid?"
>
> I can't speak for Doug, but I consider UIDs corresponding to
> no-longer-functioning email addresses to be invalid and won't sign
> them as I have no idea if the keyholder is the actual owner of that
> address.

Yeah, failure of any of the 3 elements and I won't sign it. I take uids 
with no e-mail address on a case by case basis.

FWIW,

Doug




More information about the Gnupg-users mailing list