PGP signatures.

[Anne Wilson]

On Wednesday 28 May 2008 17:07:59 Mikkel L. Ellertson wrote:
> Bill Crawford wrote:
> > 2008/5/28 Mike Chambers <mike at miketc.com>:
> >> What is mean by "name"?  Guess I am clueless to gpg and don't know my
> >> way around it (viewing man gpg at the moment) and nto sure what to do
> >> for example, when like someone's signature says invalid from evo on an
> >> email to the list?
> >
> > It's usually the email address listed as the "user id" for the key (or
> > subkey).
> >
> > I find it easiest to do this via kgpg, actually - you just right click
> > and choose "Sign keys" from the menu.
>
> While you could use the person's name, you can run into more then
> one key for a person, with different email addresses.
>
> For example, I have keys for both my infinity-ltd.com address, and
> my old execpc.com email address. I probably should revoke the
> execpc.com address, but there are still some RPMs floating around
> signed with that key. Besides, I don't remember where I stored the
> private key for that one.
>
kgpg handles all that seamlessly.  I have several people on my keyring that 
have more than one key.

It's also possible to have one key for several addresses, as I do.  For those 
that use kgpg, just take a look at my key.  It lists several addresses and is 
signed by a number of people - yes, they did see my passport :-).  Similarly,

gpg --list-keys 1E1C9C17

shows all the identities that my key can be used for.

Anne
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20080528/b8a856f5/attachment-0001.sig>