-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2017-11-17 19:56, Gordon Rice wrote: >> >> The warning is evident: Andrew's key is not signed. Questions about this >> have been asked before, and the reason is probably that most of the >> Qubes team are using split-gpg (www.qubes-os.org/doc/split-gpg) with >> subkeys. If you review that page then you will see that one of the >> downsides of using subkeys is that it's not possible to sign other >> people's keys. >> >> This doesnt mean that you cant trust Andrew's key - there are many >> things you can do to check that it is the right key and belongs to him. >> What you cant do is hand off that process of establishing trust to some >> one else (and that is what the web of trust does). >> >> Hope that's somewhat clear >> >> unman > > Perfectly clear. I had noticed the subkey, but hadn't connected the dots. > Thank you for taking the time to answer. >
Unman's explanation is great, as usual. I'll just add links to some sources that may be helpful in establishing the validity of my key, in case you're interested: https://www.qubes-os.org/team/#andrew-david-wong (fingerprint) https://andrewdavidwong.com/ (fingerprint) https://andrewdavidwong.com/adw.asc (key) https://andrewdavidwong.com/fingerprints.txt (signed statement of other fingerprints) https://keybase.io/adw (fingerprint, key, and social media proofs) https://github.com/andrewdavidwong/keys (keys) We always strongly recommend reading this (if you haven't already): https://www.qubes-os.org/security/verifying-signatures/ - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJaD5t4AAoJENtN07w5UDAwzQoP/0cRZqFpbhHKXEJhpbDe/4hq vh7u3+8Ey6hUBrhOF/l8W6Fms6xfOgewo45tOiREVkAva/rCTw3wQTrCffKYLUhi QQyldLlqReMTsd6XVGCXJ3OL7uyiCN7uonliFCqx1cRbX9h1lLzIvK+pg6kIp9+R IoJfQFSWffuOeajlp4QXNYDlLp3ezEf+9GA6AIZnaIdv4WzZ9kbG7KG6VmfrVkfH cqH0rvF/mzb+LzkKmbyqfl5cs9zD4Gy+Ozuse5xDq/csr+LW6w/GhE9x1M/4EHak aweMHx8dQULQ31mqcs7p20kVYqtaXws3ur981VaqE1WLmQT13KheS6wrpej7cSyN jWkYr+QZiCdv8IxZ0yyVL1AqoBJ7jFj9tRwCS7Voh2CAS1uWOJLM6Xo/9yG9X6tj PAyXn+BXegk4LdO4wipuL5fX212zn8PasDZwNYtr01zlPPQpLKPtVtfNKVyJnY75 FjyIi1H4Gllc8VcfCy3kEvg/SCLPWR/ijdF6VeBGQCksMxT+CPWX6fpG4p3u+pzr Wb38Zfb0jMqpOS+Rds67qIt0DoknCQR18iJQY1d2fDHmvlmhxO5KNuOef3AzdnXc mlR+myyoYnnR8u4bZYwH6gb2rP575CfV6uC68bF596WiE0R0bt466vUd5hyqaR7A ngz9hXVOciQIqqIjjx7Y =HxBu -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/fc7acd23-bc81-ee96-a07f-ce5596ab124d%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
