Using Stamper service with GnuPG (aka using non-selfsigned keys)

Steven Murdoch
Sun Apr 22 20:58:01 2001

Hash: SHA1

I've been trying to use the Stamper service
( with GnuPG but I seem to be
having problems due to the public key not being self signed. I have
emailed Matthew Richardson who runs the service and he says that he
does not want to sign they key since he only wants things that have gone
through stamper to be signed by this private key.

I have been able to import the key using --allow-non-selfsigned-uid
but when I attempt to verify anything it says that the key is invalid
(see below), even if I have signed it myself.

Is there any way to stop this happening and also are there any
security issues involved with verifying signatures by non-selfsigned

Thank you in advance,

Steven Murdoch.

[smurdoch@silicon Desktop]$ gpg filename.asc
File `filename exists. Overwrite (y/N)? y
gpg: old style (PGP 2.x) signature
gpg: Signature made Sun 22 Apr 2001 07:39:27 PM BST using RSA key ID 70B61F81
gpg: Good signature from "Timestamp Service <>"
Could not find a valid trust path to the key.  Let's see whether we
can assign some missing owner trust values.

No path leading to one of our keys found.

gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
gpg: Fingerprint: 4B 12 BC D5 78 85 11 06  3B 54 31 90 E0 9D F3 06

[smurdoch@silicon Desktop]$ gpg --list-sigs stamper
pub  2046R/70B61F81 1995-10-11 [invalid] Timestamp Service <>
sig        0712FEBD 1995-10-12  Matthew Richardson <Jersey, Channel Islands>
sig        28A03886 2001-04-22  Steven Murdoch (personal) <>

Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see


PGP/GnuPG Keys:
Geek Code: