Hit send before I added what that reply was to Sean's instructions is if
you do NOT use the fill in form or do not make the deadline you must bring
a slip of paper with your information for each person you will sign and be
signed. If you use Sean's sign-up form you will be added to a sheet that
will be handed out.

Regardless to participate you will need a picture ID ( Drivers license or
Passport ) which is valid ( currently not expired )
This also means most of us if not all of us will not sign a key that does
not contain the name on the ID presented. That is I will not sign a "Barack
Obama" key if you show me a NYS license of "John Doe"
You need to keep track of whom you checked and will sign, then you need to
sign there key ( what was in my last post )

So use the sign-up fill in form if your ok with that to make life easy. But
if your not ok with it and you still want to participate you need to
provide everyone with your information.

Check out Cryptostamp as for a reason why you want to have a verifiable
crypto signature:
http://cryptostamp.net/




On Sat, Mar 1, 2014 at 2:46 PM, Joseph Apuzzo <[email protected]> wrote:

> Some additional information
>
> joe@Mint-VirtualBox ~ $ gpg --list-keys Joseph T Apuzzo
> pub   4096R/2190E068 2014-01-28
> uid                  Joseph T Apuzzo (1-Primary) <[email protected]>
> uid                  [jpeg image of size 5967]
> uid                  Joseph T Apuzzo (2-Work) <[email protected]>
> uid                  Joseph T Apuzzo (3-Alternative) <[email protected]>
> uid                  Joseph T Apuzzo (Joe Apuzzo) <[email protected]>
> uid                  Joseph T Apuzzo (Work email) <[email protected]>
> uid                  Joe Apuzzo (rarly checked email) <[email protected]>
> sub   4096R/AA0AE7E5 2014-01-28
> sub   4096R/FCB05E48 2014-01-28 [expires: 2016-01-28]
>
> joe@Mint-VirtualBox ~ $ gpg --fingerprint Joseph T Apuzzo
> pub   4096R/2190E068 2014-01-28
>       Key fingerprint = F941 33EF 18E8 40C3 FCA0  0E53 3B6C 12B3 2190 E068
> uid                  Joseph T Apuzzo (1-Primary) <[email protected]>
> uid                  [jpeg image of size 5967]
> uid                  Joseph T Apuzzo (2-Work) <[email protected]>
> uid                  Joseph T Apuzzo (3-Alternative) <[email protected]>
> uid                  Joseph T Apuzzo (Joe Apuzzo) <[email protected]>
> uid                  Joseph T Apuzzo (Work email) <[email protected]>
> uid                  Joe Apuzzo (rarly checked email) <[email protected]>
> sub   4096R/AA0AE7E5 2014-01-28
> sub   4096R/FCB05E48 2014-01-28 [expires: 2016-01-28]
>
> My name is "Joseph T Apuzzo" that is what's on my ID.
> I and others will not sign keys that do not contain names.
> I suggest you do not sign keys that can not be verified.
> That is do not break the web of trust.
>
> Thus from the pub line the key ID is 2190E068
> The fingerprint is "Key fingerprint = F941 33EF 18E8 40C3 FCA0  0E53 3B6C
> 12B3 2190 E068"
>
> Thus you will have to print out slips of paper to give everyone that would
> have:
> -----------------------------------------------------------------------------
>
> Name = Joseph T Apuzzo
> Key ID = 2190E068
> key Fingerprint = F941 33EF 18E8 40C3 FCA0  0E53 3B6C 12B3 2190 E068
> Form of ID that I checked = ________________________
> -----------------------------------------------------------------------------
>
> Name = Joseph T Apuzzo
> Key ID = 2190E068
> key Fingerprint = F941 33EF 18E8 40C3 FCA0  0E53 3B6C 12B3 2190 E068
> Form of ID that I checked = ________________________
> -----------------------------------------------------------------------------
>
> I would print out one or two sheets to make 10 or more strips and bring 10
> to 20 strips
>
> =============================================================================
>
>
> After the party you need to sign ever-ones keys that you check the ID of
>
> joe@Mint-VirtualBox ~ $ gpg --recv-keys 2190E068
> gpg: requesting key 2190E068 from hkp server pool.sks-keyservers.net
> gpg: key 2190E068: "Joseph T Apuzzo (1-Primary) <[email protected]>" not
> changed
> gpg: Total number processed: 1
> gpg:              unchanged: 1
> (It will be diffrent as I am pulling my own key for this example)
>
> Verify the information on the paper you got, per each person you are
> signing:
>
> joe@Mint-VirtualBox ~ $ gpg --list-key 2190E068
> pub   4096R/2190E068 2014-01-28
> uid                  Joseph T Apuzzo (1-Primary) <[email protected]>
> uid                  [jpeg image of size 5967]
> uid                  Joseph T Apuzzo (2-Work) <[email protected]>
> uid                  Joseph T Apuzzo (3-Alternative) <[email protected]>
> uid                  Joseph T Apuzzo (Joe Apuzzo) <[email protected]>
> uid                  Joseph T Apuzzo (Work email) <[email protected]>
> uid                  Joe Apuzzo (rarly checked email) <[email protected]>
> sub   4096R/AA0AE7E5 2014-01-28
> sub   4096R/FCB05E48 2014-01-28 [expires: 2016-01-28]
>
> joe@Mint-VirtualBox ~ $ gpg --fingerprint 2190E068
> pub   4096R/2190E068 2014-01-28
>       Key fingerprint = F941 33EF 18E8 40C3 FCA0  0E53 3B6C 12B3 2190 E068
> uid                  Joseph T Apuzzo (1-Primary) <[email protected]>
> uid                  [jpeg image of size 5967]
> uid                  Joseph T Apuzzo (2-Work) <[email protected]>
> uid                  Joseph T Apuzzo (3-Alternative) <[email protected]>
> uid                  Joseph T Apuzzo (Joe Apuzzo) <[email protected]>
> uid                  Joseph T Apuzzo (Work email) <[email protected]>
> uid                  Joe Apuzzo (rarly checked email) <[email protected]>
> sub   4096R/AA0AE7E5 2014-01-28
> sub   4096R/FCB05E48 2014-01-28 [expires: 2016-01-28]
>
> Once everything is verified I suggest using the program
> http://www.phildev.net/pius/
> So that you can bulk sign 3-20 keys saving some time
>
> pius -s 2190E068 {key ID to sign} {key ID to sign} ...
>
> Where 2190E068 is my key ID I want to sign with.
> Done!
>
> =======================================================================
>
> Please do not forget there are the following steps in this process:
> 1) show up to the key-signing with your key on Sean's list or have it on a
> piece of paper you
>    can give out, expect 10-20 people, just needs to be a slip with the
> three lines on it
> 2) The party everyone verifies the others ID and verifies they have the
> key ID and fingerprint.
> 3) you MUST go home and sign the other person's key epically if they sign
> yours. Don't put it
>    off do it as soon as you can, otherwise you will be hounded!
>
>
> On Sat, Mar 1, 2014 at 9:20 AM, Sean Dague <[email protected]> wrote:
>
>> There is still time left to participate in the pgp keysigning party as
>> part of Wed's MHVLUG meeting. In order to do that, we do need people to
>> submit their key fingerprints so we can have a master list to cross check.
>>
>>
>> https://docs.google.com/forms/d/1yoKTls6z3NGR4wSItLYXmCeYkUhX1ZujCweDbkjjMvw/viewform
>>
>> Is a simple 5 question form (with command cheats for the pgp parts).
>> Everyone that fills that out by Noon on Wed will have their key on the
>> list. I'll print out and bring enough paper copies for everyone involved.
>>
>> And for people still looking for information on the PGP process the
>> instructions and background from SCALE -
>> http://www.socallinuxexpo.org/scale11x/pgp-key-signing-party are very
>> good.
>>
>>         -Sean
>>
>> --
>> Sean Dague
>> http://dague.net
>>
>>
>> _______________________________________________
>> Mid-Hudson Valley Linux Users Group                  http://mhvlug.org
>> https://mhvlug.org/cgi-bin/mailman/listinfo/mhvlug
>>
>> Upcoming Meetings (6pm - 8pm)                         Vassar College
>>   Mar 5 - 11th Anniversary Meeting - Home Network Show and Tell
>>   Apr 2 - Nginx: High-Performance HTTP Server, Reverse Proxy, and
>> IMAP/POP3 Proxy Server
>>   May 7 - Google App Engine
>>
>>
>
>
> --
> Joe
>
> /**
>  ** Joseph T Apuzzo
>  ** GPFS SME (Linux, Windows, AIX), Linux LPI-c1
>  ** http://www.linkedin.com/in/japuzzo/
>  ** GPG: https://sks-keyservers.net/ use 2190E068
>  **/
>



-- 
Joe

/**
 ** Joseph T Apuzzo
 ** GPFS SME (Linux, Windows, AIX), Linux LPI-c1
 ** http://www.linkedin.com/in/japuzzo/
 ** GPG: https://sks-keyservers.net/ use 2190E068
 **/
_______________________________________________
Mid-Hudson Valley Linux Users Group                  http://mhvlug.org
https://mhvlug.org/cgi-bin/mailman/listinfo/mhvlug

Upcoming Meetings (6pm - 8pm)                         Vassar College
  Mar 5 - 11th Anniversary Meeting - Home Network Show and Tell
  Apr 2 - Nginx: High-Performance HTTP Server, Reverse Proxy, and IMAP/POP3 
Proxy Server
  May 7 - Google App Engine

Reply via email to