[ Date Index ][
Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Neil Williams wrote: > > Have you tried: > http://www.lysator.liu.se/~jc/wotsap/ > It indicates the strongest path between two keys. No but I Googled hard unsuccessfully for something like that ;-) >>Somehow I use gnupg and don't "trust" Werner Koch, which seems a little >>odd to me, I'm sure I "trusted"ed Phil Zimmerman at one point, since if > > > You might trust Werner, but which Werner? I have had 7-8 keys for Werner in my > keyring at one time or another and some have recently expired. The one he signs the GNUPG distro with ! > Trusting the person and trusting the key are two separate issues. I'd say I > trust Werner Koch but I don't have enough verification to sign his key, > despite seeing endless messages from Werner on gnupg-users. Hmm the issue here is establishing the validity of the software, it could have been tampered (almost certainly Debian developers "tampered" to repackage it), so the Debian maintainer must "trust" Werner or how else did he verify he has the right GNUPG. I've implicitly trusted those Debian developers (and probably too much else beside). Of course they might have taken the argument that Werner would have complained about someone claiming to be him posting to the GNUPG lists so much overthe years ;-) >>....my keyring is now bulging at 5000+ keys, kgpg is crawling, and I >>still have no chain of trust. > > > Ouch. I'm at only 300. ..... > > And yes, I do wish there was a quicker way of deleting all those keys. Oh, this is all on my Laptop copy of my keyring once I'm happy I'll just load the relevant keys on my desktop, and copy it across again ;) -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/L4h2GFXfHI9FVgYRAijbAKCsMtO1JCfCDthKiMuIAOcOZQ6ABwCgqQti 7iEIrzqPuU/woIn6U+Cz6BU= =odWk -----END PGP SIGNATURE----- -- The Mailing List for the Devon & Cornwall LUG Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the message body to unsubscribe.