Unattended/batch key signing

Peter Lebbing peter at digitalbrains.com
Thu Mar 17 18:09:20 CET 2016


On 14/03/16 16:51, Tobias Mueller wrote:
> The reason is that I don't necessarily want my regular keyring to carry
> the signature just yet. From what I understand of the currently
> believed best practices, I would want to send the signature to the
> email address first to verify that the person does indeed have access
> to the mailbox.
> 
> Currently, this seems to require a rather artistic dance of [...]

For this, you can use external tools, like caff, which is available in
the signing-party package on Debian, and is also available for other
distributions. It will do all the work in its own homedir, so you can
keep your certifications separate.

HTH,

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>



More information about the Gnupg-users mailing list