On Sb, 07 iun 14, 22:23:12, Jerry Stuckle wrote:
> 
> I agree signing would help - but you're right, I don't know who many
> people's public keys are - either here or anywhere else.

Joining Debian's Web of Trust would be a very good starting point, 
especially since we are using Debian ;)

$ gpg --list-sigs EF22341C
pub   4096R/EF22341C 2013-07-28
uid                  Andrei Mircea POPESCU <andreimpope...@gmail.com>
sig 3        EF22341C 2013-07-28  Andrei Mircea POPESCU 
<andreimpope...@gmail.com>
sig          DEA22DE9 2013-07-28  Andrei Popescu <andreimpope...@gmail.com>
sig 3        EF22341C 2013-07-28  Andrei Mircea POPESCU 
<andreimpope...@gmail.com>
sig          2BEF0A33 2013-08-23  Didier Raboud <did...@raboud.com>
sig 2        151DFFDC 2013-08-24  Bernhard R. Link <b...@mail.brlink.eu>
sig          AC583520 2013-08-31  Holger Levsen <hol...@layer-acht.org>
sig          069AAA1C 2013-08-31  Holger Levsen <hol...@layer-acht.org>
sub   4096R/5D7DFF29 2013-07-28
sig          EF22341C 2013-07-28  Andrei Mircea POPESCU 
<andreimpope...@gmail.com>


If one is living in the USA or western Europe getting one's key signed 
shouldn't be too difficult.

https://wiki.debian.org/Keysigning
https://wiki.debian.org/Keysigning/Coordination
https://wiki.debian.org/Keysigning/Offers

Nice side effect: you can verify the authenticity of Debian Installer 
images, since those are signed by a Debian Member.

http://www.debian.org/CD/verify

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt

Attachment: signature.asc
Description: Digital signature

Reply via email to