On 03/11/2011 01:44 AM, Ben McGinnes wrote:
> Ah, this is what I've been looking around for!  For the sake of the
> archives, how does one provide a non-exportable certification?
> Obviously the export flag won't cut it.

non-exportable OpenPGP certifications are also known as "local"
certifications.

To make a non-exportable OpenPGP certification, use:

 gpg --lsign-key [email protected]

To put that in a file:

 gpg --export-options export-local --export --armor [email protected] \
    > frida.gpg

Then the receiving party does:

 gpg --import-options import-local --import < frida.gpg

 -----------------

So, for example, if you wanted to mail your certifications over alice's
key to bob without exposing them over the network, you would do
something like:

gpg --export-options export-local --export --armor [email protected] | \
 gpg --encrypt --armor -r [email protected] | \
 mail -s 'sekrit info 4 u' [email protected]

hth,

        --dkg

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Gnupg-users mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to