alphasigmax at gmail.com
Sat Nov 5 07:09:40 CET 2005
-----BEGIN PGP SIGNED MESSAGE-----
David Shaw wrote:
> On Fri, Nov 04, 2005 at 10:15:16PM +0300, Pawel Shajdo wrote:
>>Can somebody explain me what is "back signatures"?
>>Manual not very clear about this.
> It's a countermeasure against an attack against signing subkeys.
> Basically, the primary key signs all subkeys. With backsigs, the
> signing subkey also signs the primary key.
> Without this, an attacker can "steal" a signing subkey from someone
> else and try and pretend that a signature came from his own key. It's
> not a particularly good attack: the attacker can't issue signatures to
> prove his ownership.
Will this remove the possibility of moving subkeys from one primary key
to another / converting primary keys to subkeys (documented at
Alphax | /"\
Encrypted Email Preferred | \ / ASCII Ribbon Campaign
OpenPGP key ID: 0xF874C613 | X Against HTML email & vCards
http://tinyurl.com/cc9up | / \
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the Gnupg-users