--lsign --add-me or the invisible WoT

Stefan Claas sac at 300baud.de
Thu Aug 1 15:16:02 CEST 2019


Friedhelm Waitzmann wrote:

> Stefan Claas:
> 
> >I lsign Bob's key so third parties do not know (normally) that I did
> >this. But how could my friend Alice trust Bob's key she has without
> >my non-exportable lsign sig?
> 
> >What I tried to propose is an additional parameter, like --add-me
> >which would write a 'blob' to a second file.db where I can export
> >then Bob's blob (non-compatible to SKS etc.) with my --lsign sig,
> >and give it to my friend Alice.
> 
> I think, this can be done with GnuPG as it is:

[snip]

Thank you very much Friedhelm!

Best regards
Stefan

-- 
box: 4a64758de9e8ceded2c481ee526440687fe2f3a828e3a813f87753ad30847b56
GPG: C93E252DFB3B4DB7EAEB846AD8D464B35E12AB77 (avail. on Hagrid, WKD)



More information about the Gnupg-users mailing list