With talk of topics for future meetings popping up, this might be a good
time to bring up the idea of using the meeting to do some PGP/GPG
keysigning.

This has been mentioned/discussed in the past (see
http://lists.ethernal.org/cantlug-0201/msg00021.html), and was received
with a mild response.  I know of a few clug members who have keys
available, and would like a chance to expand my web of trust.  If your
eyes are glazing over already, you might want to skip the rest...

I've currently got the key IDs and fingerprints of my two keys in my
wallet, with both Canadian and New Zealand issued identification.  All
that is required is for the person signing the key to verify that I am
who I say I am (with the identification) and that the fingerprint I give
you matches the fingerprint stored on the key, which is available on the
public keyservers.  Having satisfied those conditions, my key can be
signed by the person verifying my information.

It's a pretty simple and straightforward procedure, however please be
responsible with your keys and strictly follow procedure when
authenticating people for keysigning.  The more careful we are in
checking the validity of each identity, the stronger the web of trust
is.

Details are available in the GNU Privacy Handbook, at
http://www.gnupg.org/gph/en/manual/book1.html  I'd recommend reading
through it before generating any keys and uploading them to a keyserver.

If you're interested in having a key signed, be sure to bring along
photo idea (government issued) and a copy of your key ID and fingerprint
(or have several printed off and ready to hand out, which may help save
copying errors (I tend to reverse numbers easily)).  No electronic copy
is needed.  That part happens when I get home, retrieve the key from the
keyserver and verify the fingerprint.  If it's all good, I'll send the
key back to the server signed by my key.

I'm willing to field questions, but I reserve the right to question
others with more experience/knowledge in the case that I'm unsure of the
answer.  And if anyone isn't planning on attending the meeting but is
interested in just meeting up to exchange details, I'm fairly easy to
find.  Especially if you happen to be rollerblading around Hagley Park
on a pleasant day. :)

Greg
--- -

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to