per-user data signatures [was: Re: multiple keys vs multiple identities]

David Shaw dshaw at jabberwocky.com
Fri Sep 24 18:57:06 CEST 2010


On Sep 24, 2010, at 12:47 PM, Daniel Kahn Gillmor wrote:

> On 09/24/2010 11:53 AM, David Shaw wrote:
>> There is actually a defined field for this in OpenPGP (see section 5.2.3.22, Signer's User ID).  I don't think anyone implements it though.
> 
> Ah, so there is!  Thanks, David.
> 
>>> However, testing right now, it doesn't seem to work with gpg for regular
>>> data signatures:
>>> 
>>> echo test | gpg --sign --set-notation 'test at example.org=test' | \
>>> gpg --list-packets
>>> 
>>> does not show the notation :(
>> 
>> It works for me.  I even cut and paste your exact command line.
>> 
>> 	hashed subpkt 20 len 28 (notation: test at example.org=test)
> 
> Weird.  What am i doing wrong?  what version of gpg are you using?
> Here's my full transcript:

>>> :signature packet: algo 1, keyid CCD2ED94D21739E9
>>> 	version 3, created 1285346618, md5len 5, sigclass 0x00
>>> 	digest algo 10, 


Hmm.  It's a v3 sig which can't carry a notation.  Do you have force-v3-sigs set anywhere?  Or any of the --pgpX options (which set force-v3-sigs) ?

David




More information about the Gnupg-users mailing list