Question about how to secure the signing key

David Shaw dshaw at jabberwocky.com
Wed Feb 4 23:16:22 CET 2009


On Wed, Feb 04, 2009 at 07:09:36PM -0300, Faramir wrote:
> David Shaw escribi??:
> ...
> >> "The fix is fairly simple conceptually.  Just have the signing subkey
> >> issue a signature on the primary key."
> 
> > If the key was created with 1.4.9, the problem is already solved.  As
> > of 1.4.3 (2006-04-03), GPG supports the necessary cross-certification.
> 
>    Ok, my keys were cross-certified by default, at creation time...
> 
>    Thanks, I supposed probably I didn't need to worry about it, but it
> was better to ask and be sure.

Definitely.  Plus, now it is in the archives, so if someone was
wondering they'll see it.

David



More information about the Gnupg-users mailing list