Digital signature madness....

[Ow Mun Heng]

On Wed, 2004-10-13 at 07:19, Rodolfo J. Paiz wrote:
> On Fri, 2004-10-08 at 19:58 +0200, Alexander Dalloz wrote:
> > 
> > Edit ~/.gnupg/gpg.conf and enable
> > 
> > keyserver-options auto-key-retrieve
> > 
> 
> Having enabled this, my Evolution (2.0.1 in FC3-T2) went from reporting
> "Invalid signature" to saying "Valid signature, cannot verify sender."
> 
> 	1. How do I now get it to verify sender?
You need to get the GPG Public key of that sender and import it and then
sign it depending upon how much you trust that person.

> 
> 	2. What do I do so others can verify me (since I just created a keypair
> a couple of days ago, surely I'm the only one with my pub key)?
Upload to a keyserver. That's the best thing I think. But you can also
just send it to that person.
> 
> 	3. What changes should we make to the default configuration so
> verifying keys becomes easier for all Fedora users?
Under Gnome, you can use GPA (available at gpg's website) and kde has similiar prog too


> Cheers,

-- 
Ow Mun Heng
Fedora GNU/Linux Core 2 on D600 1.4Ghz CPU kernel
2.6.7-2.jul1-interactive 
Neuromancer 09:54:39 up 43 min, 5 users, load average: 0.28, 0.25, 0.42