Strange behaviour on MacOSX

[Neil Williams]

Atom 'Smasher' wrote:

> this is cool... there's gonna be a keysigning party at HOPE 5....
> 
>  _________________________________________
>  PGP key - http://atom.smasher.org/pgp.txt
>  762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808
>  -------------------------------------------------

I just emailed atom about this but although I know atom likes tinkering 
with his keys, it might not be the key that is wrong. I think there's 
something strange going on with GnuPG 1.2.4 on MacOSX. When I verify 
this email on my iBook I get:

fergus:~ neil$ gpg --verify Documents/atom.eml
gpg: Signature made Mon Jun 21 19:48:26 2004 BST using DSA key ID 3D7D41E3
gpg: Good signature from "Atom Smasher <atom at suspicious.org>"
gpg:                 aka "Atom Smasher <atom at smasher.org>"
gpg: WARNING: This key has been revoked by its owner!
gpg:          This could mean that the signature is forgery.
gpg: reason for revocation: Key is superseded
gpg: revocation comment: This key has been superseded by:
gpg: revocation comment: 4096R 0x762A3B98A3C396C9C6B7582AB88D52E4D9F57808
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the 
owner.
Primary key fingerprint: 3EBE 2810 30AE 601D 54B2  4A90 9C28 0BBF 3D7D 41E3

When I verify the same email on my PC (running the same version of GnuPG 
on Debian unstable) I get:

neil at garfield:~$ gpg --verify atom.eml
gpg: Signature made Mon Jun 21 19:48:26 2004 BST using DSA key ID 3D7D41E3
gpg: Good signature from "Atom Smasher <atom at smasher.org>"
gpg:                 aka "Atom Smasher <atom at suspicious.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the 
owner.
Primary key fingerprint: 762A 3B98 A3C3 96C9 C6B7  582A B88D 52E4 D9F5 7808
      Subkey fingerprint: 3EBE 2810 30AE 601D 54B2  4A90 9C28 0BBF 3D7D 41E3


I can scp the email back and forth, delete the original key (that came 
from keyserver.kjsl.com) and use the key from a file from atom's own 
website and no difference.

What might be going on?

Here's --check-sigs from the MacOSX box:

fergus:~ neil$ gpg --check-sigs d9f57808
pub  4096R/D9F57808 2004-05-11 Atom Smasher <atom at smasher.org>
sig!3   P   D9F57808 2004-05-12   Atom Smasher <atom at smasher.org>
uid                            Atom Smasher <atom at suspicious.org>
sig!3   P   D9F57808 2004-05-12   Atom Smasher <atom at smasher.org>
sub  1024D/3D7D41E3 2003-10-04 [expires: 2006-01-25]
sig!        D9F57808 2004-05-12   Atom Smasher <atom at smasher.org>
sub  2048g/1E88BF71 2003-10-04 [expires: 2006-01-25]
sig!        D9F57808 2004-05-12   Atom Smasher <atom at smasher.org>


and again from the PC:

neil at garfield:~$ gpg --check-sigs d9f57808
pub  4096R/D9F57808 2004-05-11 Atom Smasher <atom at smasher.org>
sig!3   P   D9F57808 2004-05-12   Atom Smasher <atom at smasher.org>
uid                            Atom Smasher <atom at suspicious.org>
sig!3   P   D9F57808 2004-05-12   Atom Smasher <atom at smasher.org>
sub  1024D/3D7D41E3 2003-10-04 [expires: 2006-01-25]
sig!        D9F57808 2004-05-12   Atom Smasher <atom at smasher.org>
sub  2048g/1E88BF71 2003-10-04 [expires: 2006-01-25]
sig!        D9F57808 2004-05-12   Atom Smasher <atom at smasher.org>


I can't see any difference in the key.

BTW. What does the P mean?

-- 

Neil Williams
=============
http://www.codehelp.co.uk/
http://www.dclug.org.uk/
http://www.isbn.org.uk/
http://sourceforge.net/projects/isbnsearch/

http://www.biglumber.com/x/web?qs=0x8801094A28BCB3E3
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 249 bytes
Desc: OpenPGP digital signature
Url : /pipermail/attachments/20040621/d15b39b9/signature.bin