Sun Mar 2 18:27:02 2003
-----BEGIN PGP SIGNED MESSAGE-----
Am Sonntag, 2. M=E4rz 2003 13:43 schrieb Per Tunedal:
> Hi Peter,
> At 21:37 2003-03-02 +1100, Peter Lavender wrote:
> >Hi Everyone,
> >As I currently understand it, the idea is to get my own key signed by
> >others. Once my key is signed by someone else, they export it
> They may export the signed key to a keyserver and anyone updating the k=
> from the keyserver will learn about the new signatures. You may downloa=
> your own key with the new signatures from the keyserver as welll.
IMHO the signer should send the signed key to the owner and let the owner=
decide if he wants the signatuer or not.=20
After a key signing party you may get a lot of signatures and the key own=
should decide wich signatures he will accept and upload.
> >send it back to me, at which point I import it.
> And you should send your key to a keyserver to let everybody know about=
> new signature.
> >Now their signature
> >is included when I sign emails.
> NO, their signature is not included when you sign. It's added to the pu=
> key and is always visible, weather you sign something or not.
> >This how the WoT works isn't it?
> >It seems to make sence to me, otherwise if my key is signed and never
> >sent to me, how will anyone else who recieves a signed email from me
> >know who else trusts my signature?
> The receiver sets a trust according to first hand knowledge about your =
> or according to signatures from others he trusts. If the receiver hasn'=
> put any trust into your key he will get a message like "there is nothin=
> that implies that the key belongs to the owner".
> Per Tunedal
> Gnupg-users mailing list
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
-----END PGP SIGNATURE-----