On 14/03/16 16:51, Tobias Mueller wrote:
> The reason is that I don't necessarily want my regular keyring to carry
> the signature just yet. From what I understand of the currently
> believed best practices, I would want to send the signature to the
> email address first to verify that the person does indeed have access
> to the mailbox.
> 
> Currently, this seems to require a rather artistic dance of [...]

For this, you can use external tools, like caff, which is available in
the signing-party package on Debian, and is also available for other
distributions. It will do all the work in its own homedir, so you can
keep your certifications separate.

HTH,

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>

_______________________________________________
Gnupg-users mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to