new user anxiety

[david at gbenet.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 16/04/12 22:47, Michael Talbot-Wilson wrote:
> On Mon, 16 Apr 2012, Robert J. Hansen wrote:
> 
>> On 4/16/2012 12:12 AM, Michael Talbot-Wilson wrote:
>>> Found nothing in the FAQ on this.
>>
>> First, it's an entirely expected thing.  It's not a problem, it's just a
>> thing.
> 
> Thanks.  And thanks to everyone who responded.  I think I found the
> answer overnight in Lucas's book, the section "Email from Beyond Your
> Web of Trust" (p. 120).  I guess I need to _have_ some such web.
> 
> Thanks again.
> 
> _______________________________________________
> Gnupg-users mailing list
> Gnupg-users at gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users
> 
Hello Michael,

Firstly, ALL keys are untrustworthy - even if signed by some one else - it's not till you
have met the person - verified it's them - and checked a copy of their public key - which
they show you as a print out. If you then decide to have a level of confidence (trust) in
that person being who they say they are - and the key belongs to them then you can set some
level of trust.

The web  of trust is not something you can pick up. Rather the web of trust is a group of
people that have seen each other's public keys and thus signed them. So your mates and your
sister all use pgp - they each agree to sign each's key - then you have a web of trust.

- -- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of the kind.
Stern, sane,every brain-cell perfect and complete even at the moment of death. No delusion.”
http:/counter.li.org 512854
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPlWgRAAoJEOJpqm7flRExR+MH/0rweTmNZRnADsS6ZZtq7F/m
RWMkQ6Quqp09Ve12uTzOPKjIocaNyhv3+8P/ILXaTT1f+tGLnc2OZasxC3SdU1F9
oB+XCzwaxNp1fxGQdJBtj/DNAkWgr+EtpKvWRu+5EOiCqTcuJu/7/JdV8lRG62qx
xY/vGt1UzYrsAmqnYyUl2e0JvToxPHIMRZugA3NXRX3YChd4n9TdLt/NUc6WjNUd
JrvLag1HUe1qlzAUEMMAtYatkX1YwSxSk+V/R+WoyskdbDjejwX5eZ/o8X2EMMTM
Dw9PpBUWmySSft1NzzPR6fC/ocgRhYuDPDan/9Mz+uI3kfvzvxT2K61lbmlM6oo=
=OQg2
-----END PGP SIGNATURE-----