On Sat, 2006-10-14 at 03:21 -0600, [EMAIL PROTECTED] wrote: <SNIP>
> [8] IMPORT somebody ELSE'S key and sign it; Werner's signing <snip> > Command> # SIGN TO THE LEVEL YOU KNOW THIS KEY IS REALLY HIS > # beats me if it really is his key - others seem to think it > # is and it verifies GnuPg as valid. GnuPG - sorry. > Command> save > $ gpg --list-secret-keys > $ gpg --list-keys > > If everything looks okay after step 8, then import somebody's > key that you regularly send encrypted and or signed email to. > Then do the usual tests of both of you sending: > > a. Signed email > b. Encrypted email > c. Signed & encrypted email > > If all of them work fine both ways, then you are probably okay. > NOW DO STEP 2 AGAIN AND STORE IT IN A SAFE PLACE. DO IT OFTEN! > BACK UP, BACK UP, BACK UP, BACK UP, BACK UP, BACK UP, BACK UP! I should add that if the person on the other end is using the Evolution MUA and you are using Thunderbird or some other MUA that has both PGP-Inline and PGP/MIME to make sure you that you select PGP/MIME. Evolution does not understand PGP-Inline, and Outlook and Outlook Express with WinPT don't understand PGP/MIME: http://privacy.movingsucks.org/ Johannes Schmid's <[EMAIL PROTECTED]> keys have been resurrected. Sorry about not remembering that tidbit about Evolution Johannes. Your keys are fine. You could probably have done it without creating the bogus signing key but that is just one extra thing to make sure all is well. Case closed. Ciao HHH _______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
