new user anxiety

[Robert J. Hansen]

On 4/16/2012 12:12 AM, Michael Talbot-Wilson wrote:
> Found nothing in the FAQ on this.

First, it's an entirely expected thing.  It's not a problem, it's just a
thing.

Until you have personally vouched for the fact a certificate belongs to
a certain person, GnuPG will warn you about trusting signatures made by
that certificate.  You haven't vouched for Werner's certificate, so
GnuPG is warning you.  That's all.

You can get rid of the error message by:

    gpg --edit-key 4f25e3b6 lsign

Enter your passphrase, and GnuPG will know that you are vouching for the
fact certificate 0x4F25E3B6 really belongs to Werner.

Try verifying the signature again, and the warning message will disappear.

Hope this helps!