Re: OT: More about GPG signing

May 10th, 2012 - 11:50 am ET by Phil Dobbin | Report spam
Hash: SHA1

On 10/05/12 16:14, Tony van der Hoff wrote:


So, this message was signed.

Having recently installed enigmail, to see what all the fuss is about
in the other thread. I find I'm at a loss to understand how to
interpret this.
-
OpenPGP Security Info

Unverified signature

gpg command line and output:
/usr/bin/gpg
gpg: Signature made Thu 10 May 2012 15:27:47 BST using RSA key ID A093C263
gpg: Can't check signature: public key not found
-

Am I expected to go to some keyserver to find the sender's public key?
How, where, why?

Maybe I've not set up Enigmail correctly?

Alternatively, should I just ignore the signature, in which case why
is the sender polluting the list with useless crap?



You have an option to import my key under your PGP menu should you wish
to do so . If you have installed Enigmail then go ahead & do it.

However, if you have no wish to use PGP & see it as "polluting the list
with useless crap?", I suggest you uninstall Enigmail. Or you could
continue to be incensed over a dozen or so lines of PGP & keep Enigmail
for some other purpose.

Cheers,

Phil...

currently (ab)using
Debian Squeeze, Fedora Verne, OS X Snow Leopard, Ubuntu Oneiric




To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/4FABE2B6.6020004@gmail.com
email Follow the discussionReplies 52 repliesReplies Make a reply

Replies

#1 Tony van der Hoff
May 10th, 2012 - 11:50 am ET | Report spam
On 10/05/12 16:45, Phil Dobbin wrote:
On 10/05/12 16:14, Tony van der Hoff wrote:

So, this message was signed.



Having recently installed enigmail, to see what all the fuss is about
in the other thread. I find I'm at a loss to understand how to
interpret this.
-
OpenPGP Security Info



Unverified signature



gpg command line and output:
/usr/bin/gpg
gpg: Signature made Thu 10 May 2012 15:27:47 BST using RSA key ID A093C263
gpg: Can't check signature: public key not found
-



Am I expected to go to some keyserver to find the sender's public key?
How, where, why?



Maybe I've not set up Enigmail correctly?



Alternatively, should I just ignore the signature, in which case why
is the sender polluting the list with useless crap?



You have an option to import my key under your PGP menu should you wish
to do so . If you have installed Enigmail then go ahead & do it.

However, if you have no wish to use PGP & see it as "polluting the list
with useless crap?", I suggest you uninstall Enigmail. Or you could
continue to be incensed over a dozen or so lines of PGP & keep Enigmail
for some other purpose.



As I suspected...
Tony van der Hoff | mailto:
Buckinghamshire, England |


To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Archive: http://lists.debian.org/

Similar topics