Re: Keysigning challenge policies/procedures

2006-07-07 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi David, David Shaw wrote: > I've been away on vacation and only picked up this thread now. Hope it was relaxing. Welcome back seems like a negative thing to say. ;) > This statement is not correct. Back in the PGP 2.x days, this might > have be

Re: Keysigning challenge policies/procedures

2006-07-07 Thread David Shaw
On Fri, Jul 07, 2006 at 07:22:40PM +0200, Mark Kirchner wrote: > On Friday, July 7, 2006, 11:19:47 AM, Marcus wrote: > > * Todd Zullinger <[EMAIL PROTECTED]> wrote: > > > >> What I don't see in any of the links is more information about sending > >> an email challenge before signing a key. (My apo

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Marcus Frings
* Ingo Klöcker <[EMAIL PROTECTED]> wrote: > On Friday 07 July 2006 17:09, Todd Zullinger wrote: >> Have you found in practice that you don't run into many sign-only >> keys that you are asked to certify? > Among a few hundreds keys I've signed so far only a handful were > sign-only or certificat

Re: Keysigning challenge policies/procedures

2006-07-07 Thread David Shaw
On Fri, Jul 07, 2006 at 04:15:03PM -0400, Todd Zullinger wrote: > Ingo Klöcker wrote: > > On Friday 07 July 2006 17:09, Todd Zullinger wrote: > [...] > >> But that does mean that you can't get a signed key to someone if > >> the key you've signed doesn't have any encryption capabilities, > >> corre

Re: Keysigning challenge policies/procedures

2006-07-07 Thread David Shaw
On Fri, Jul 07, 2006 at 08:39:37PM +0200, Ingo Klöcker wrote: > On Friday 07 July 2006 17:09, Todd Zullinger wrote: > > Marcus Frings wrote: > > > * Todd Zullinger <[EMAIL PROTECTED]> wrote: > > >> What I don't see in any of the links is more information about > > >> sending an email challenge befo

Re: Keysigning challenge policies/procedures

2006-07-07 Thread David Shaw
On Fri, Jul 07, 2006 at 11:19:47AM +0200, Marcus Frings wrote: > * Todd Zullinger <[EMAIL PROTECTED]> wrote: > > > What I don't see in any of the links is more information about sending > > an email challenge before signing a key. (My apologies if I'm > > overlooking it on your page or any of the

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ingo Klöcker wrote: > On Friday 07 July 2006 16:56, Todd Zullinger wrote: [...] >> Could you elaborate a little on the procedure you use to generate the >> challenges? I'd love to have some examples of how other folks do >> things to present to my fel

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ingo Klöcker wrote: > On Friday 07 July 2006 17:09, Todd Zullinger wrote: [...] >> But that does mean that you can't get a signed key to someone if >> the key you've signed doesn't have any encryption capabilities, >> correct? > > That's obviously cor

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Ingo Klöcker
On Friday 07 July 2006 17:09, Todd Zullinger wrote: > Marcus Frings wrote: > > * Todd Zullinger <[EMAIL PROTECTED]> wrote: > >> What I don't see in any of the links is more information about > >> sending an email challenge before signing a key. (My apologies if > >> I'm overlooking it on your page

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Ingo Klöcker
On Friday 07 July 2006 16:56, Todd Zullinger wrote: > Ingo Klöcker wrote: > > I haven't used it myself because I'm using a self-written script > > for creating challenges with KMail. > > Could you elaborate a little on the procedure you use to generate the > challenges? I'd love to have some examp

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Mark Kirchner
On Friday, July 7, 2006, 11:19:47 AM, Marcus wrote: > * Todd Zullinger <[EMAIL PROTECTED]> wrote: > >> What I don't see in any of the links is more information about sending >> an email challenge before signing a key. (My apologies if I'm >> overlooking it on your page or any of the others.) > > B

Key Import Error

2006-07-07 Thread Ken Ferguson
I'm trying to import a pgp key and getting an error I know nothing about. gpg --import D:\keyfile.key.pgp gpg: mpi too large for this implementation (40843 bits) gpg: mpi too large for this implementation (43184 bits) gpg: read_block: read error: invalid packet gpg: import from `D:\keyfile.key.p

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marcus Frings wrote: > * Todd Zullinger <[EMAIL PROTECTED]> wrote: > >> What I don't see in any of the links is more information about >> sending an email challenge before signing a key. (My apologies if >> I'm overlooking it on your page or any of t

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ingo Klöcker wrote: > Try CA-Bot (http://cabot.alioth.debian.org/). Thanks Ingo. > I haven't used it myself because I'm using a self-written script for > creating challenges with KMail. Could you elaborate a little on the procedure you use to genera

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Marcus Frings
* Todd Zullinger <[EMAIL PROTECTED]> wrote: > What I don't see in any of the links is more information about sending > an email challenge before signing a key. (My apologies if I'm > overlooking it on your page or any of the others.) Before I used a protocol to signing keys where I sent out rand

Re: Keysigning challenge policies/procedures

2006-07-07 Thread Ingo Klöcker
Am Freitag, 7. Juli 2006 06:31 schrieb Todd Zullinger: > What I don't see in any of the links is more information about > sending an email challenge before signing a key. (My apologies if > I'm overlooking it on your page or any of the others.) > > It's been discussed here before but I've not foun