Proof of email ownership
pats_comp_solutions at hotpop.com
Sat Aug 6 01:42:38 CEST 2005
-----BEGIN PGP SIGNED MESSAGE-----
David Srbecky wrote:
> I just installed GnuPG to Thunderbird, created a key pair and
> uploaded it to a keyserver. I have expected to receive some mail
> designed to verify that I really own the email address (similar to
> the one that just received to subscribe to this list), but I did
> not receive any.
> How can people know that I own the address if GnuPG did not check
> My next idea was that GnuPG is multipurpose cryptographic software
> and I need to get some special signature verifying that I own
> specific mail. I was looking for a way to accomplish that, but I
> have not found any.
> Are there any servers/bots that can verify that I own mail and then
> sign my key to certify that?
> Regards, David Srbecky
> _______________________________________________ Gnupg-users mailing
> list Gnupg-users at gnupg.org
The understanding I have is that you have to establish trusts with
people. All the keyserver does is shows that someone using your
e-mail address signed the message. The individual who receives the
e-mail has to establish trust for the key. They do that either by
contacting you via another method for confirmation, or meeting you at
a 'keysigning' where you establish a face to face with other people.
I'm relatively new to all of this myself, but I'm pretty sure I read
that in the gnupg.org website. That would be your best source of
information, short of other more experienced people replying here.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the Gnupg-users