Re: Keyservers mangle with subkey binding sigs

8 msg	adding a new email to a key
3 msg	How to export/import my private key
4 msg	keypair to/from armor format
3 msg	Multiple PCs
2 msg	Changing hash on Windows Vista with gpg4win v1.1.3
10 msg	How true can this be?
1 msg	SVN 4679
1 msg	generate command fails on OpenPGP cards
11 msg	Problem with keys imported via DNS CERT
8 msg	Need tips on how to backup my keys
6 msg	GnuPG Summer Riddle 2007
18 msg	IDEA
3 msg	new key // sorry, bad sig
1 msg	new key
3 msg	GPG Home Directory
3 msg	IDEA licensing issues
1 msg	Re: [Enigmail] Keyservers mangle with subkey bi...
6 msg	Fwd: is there any remote possibility to recover...
2 msg	Why gpg complains?

Keyservers mangle with subkey binding sigs
\ Vlad \SATtva\ Miller (19 Jan 2008)
. \ Simon Josefsson (19 Jan 2008)
. . \ Vlad \SATtva\ Miller (19 Jan 2008)
. \ Charly Avital (19 Jan 2008)
. . \ Vlad \SATtva\ Miller (19 Jan 2008)
. . . \ Charly Avital (19 Jan 2008)

Subject:	Re: Keyservers mangle with subkey binding sigs
Group:	Gnupg-users
From:	Charly Avital
Date:	19 Jan 2008

Vlad "SATtva" Miller wrote the following on 1/19/08 8:38 AM:
[...]

>
> So here's an explicit distinction between what we got from a keyserver
> and from the gpg output.

As far as I am concerned, that's what I got from the keyserver I used,
yes.

I believe <steffenjan> posted that:
"I'm not too deep into subkeys, but I just downloaded your key
0x8443620A from a keyserver and it had tow subkeys 0x070E0B73 and
0x7D57ED51 both valid till 1.1.2010.
But the self-signs on all the different Sub-IDs are expired on 5.1.2008.
All this didn't change when I imported the key from www.vladmiller.info

So my hint is to sign all the IDs too."

> [snip]
>> In my system now:
>>
>> I have not signed your key
>
> And you should not.

Thank you for telling me what I should not, I know the protocol.

There is such a thing named 'local sign', that makes a local signature
non-exportable, not that I intend to upload your key, that just isn't done.

As I indicated in my complete post, I signed (local signature) just in
order to find out whether it would make the interrogation point on your
*second* "photo" go away, which it didn't, not unexpectedly.

Best regards,
Charly

_______________________________________________
Gnupg-users mailing list
Gnupg-users
http://lists.gnupg.org/mailman/listinfo/gnupg-users