My PGP troubles
leftyfb at left-click.org
Wed Feb 20 17:42:40 GMT 2008
-----BEGIN PGP SIGNED MESSAGE-----
I guess i'm confused. I'm using Thunderbird with Enigmail which uses
OpenPGP. What exactly are you saying is wrong with my client? I don't
have problems with anyone elses keys. The last few emails you've sent
show up fine. They're just not trusted. That's a manual process on my
part which I have yet to do. There were 2 you sent earlier today that
said they were invalid signatures. Other than that, everything else is fine.
Caleb Marcus wrote:
> Yep. It looks like it's just your client... by the way, should we set up
> some sort of general policy on what types of ID will be accepted, or
> should it be left up to the individual signing the key? Are we using
> some sort of a formal keysigning method, or just letting people sign
> each other's keys freely? If it's the former, we should post some
> guidelines on the installfest page so people know what to prepare.
> On Wed, 2008-02-20 at 12:30 -0500, leftyfb wrote:
> gpg: Signature made Wed 20 Feb 2008 12:19:11 PM EST using DSA key ID
> gpg: Good signature from "Caleb Marcus <caleb.marcus at gmail.com <mailto:caleb.marcus at gmail.com>>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg: There is no indication that the signature belongs to the
> It seems to work now. Untrusted, but we'll fix that at the installfest
> or something when we finally get to key signing.
> Caleb Marcus wrote:
>> Hmm. Well, it could be that I'm not using inline-PGP... can you try
>> verifying this bit of clearsigned text (copy it into a text file and run
>> this command: gpg --verify filename
>> bit of clearsigned text
> On Wed, 2008-02-20 at 11:28 -0500, leftyfb wrote:
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA1
>>> OpenPGP Security Info
>>> Error - signature verification failed
>>> gpg command line and output:
>>> /usr/bin/gpg --charset utf8 --batch --no-tty --status-fd 2 --verify
>>> gpg: Signature made Wed 20 Feb 2008 11:23:30 AM EST using DSA key ID
>>> gpg: BAD signature from "Caleb Marcus <caleb.marcus at gmail.com <mailto:caleb.marcus at gmail.com> <mailto:caleb.marcus at gmail.com>>"
>>> - -----------------
>>> I sync'd with 2 different keyservers just now and yours hasn't been updated.
>>> gpg: key 2926DE3E: "Caleb Marcus <caleb.marcus at gmail.com <mailto:caleb.marcus at gmail.com> <mailto:caleb.marcus at gmail.com>>" not changed
>>> Caleb Marcus wrote:
>>> > According to leftyfb, my messages are showing up as invalid... can
>>> > anyone confirm/deny this?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the Ubuntu-us-ma