Formal Keysigning - Revision history

BobJonkman: Added introductory paragraph

2015-08-03T20:40:39Z

Added introductory paragraph

Myles: /* Participants */

2014-03-11T19:09:07Z

Participants

Myles: It's --gen-key and not --key-gen

2014-03-03T20:36:31Z

It's --gen-key and not --key-gen

BobJonkman: /* Participants */ Added exhortation to verify key fingerprint before signing, add example of signing

2014-03-03T18:47:42Z

Participants: Added exhortation to verify key fingerprint before signing, add example of signing

BobJonkman: Capitalization of KeyMaster

2014-03-03T18:37:55Z

Capitalization of KeyMaster

BobJonkman: Moved info about keysigning party to Discussion page

2013-12-18T22:31:28Z

Moved info about keysigning party to Discussion page

BobJonkman: Updated links to Keysigning Keyring; removed alert box

2013-12-02T19:58:31Z

Updated links to Keysigning Keyring; removed alert box

BobJonkman: /* Participants */ Added keyring importing

2013-12-02T19:53:38Z

Participants: Added keyring importing

BobJonkman: Added See Also section, Informal Keysigning

2013-12-02T17:49:47Z

Added See Also section, Informal Keysigning

BobJonkman: /* ToDo for the Participants */ Make publickey filename consistent (MyPublicKey.gpg

2013-12-01T06:51:10Z

ToDo for the Participants: Make publickey filename consistent (MyPublicKey.gpg

← Older revision		Revision as of 20:40, 3 August 2015
Line 1:		Line 1:
		+	Signing other people's GnuPG/PGP keys and having them sign yours is a way of expanding the Web Of Trust, which makes GnuPG/PGP more useful. People you may not have met trust the signatures on your key, and so trust your key. In turn, you can trust keys that have signatures of people you trust. The Web Of Trust is how we accomplish the fourth factor of authentication: '''Someone who knows you'''.
		+
	= Purpose =		= Purpose =
	A keysigning is not meant to establish your absolute, one true, [https://support.google.com/plus/answer/1228271?hl=en Real] [https://www.facebook.com/help/112146705538576 Name]™ identity, it is merely to associate a keyID with your identity. The identity you use is up to you, as published in the UserID portion of your GnuPG/PGP key. It could be only an e-mail address, a nickname, or even your real name. It's how people identify you in correspondence, or associate you as the author of a document or software. By signing your key, people verify that the KeyID is associated with the identity by which they know you.		A keysigning is not meant to establish your absolute, one true, [https://support.google.com/plus/answer/1228271?hl=en Real] [https://www.facebook.com/help/112146705538576 Name]™ identity, it is merely to associate a keyID with your identity. The identity you use is up to you, as published in the UserID portion of your GnuPG/PGP key. It could be only an e-mail address, a nickname, or even your real name. It's how people identify you in correspondence, or associate you as the author of a document or software. By signing your key, people verify that the KeyID is associated with the identity by which they know you.

@@ Line 67: / Line 67: @@
 # Send each signed Public Key to its owner by e-mail, with copy to the KeyMaster.
 #* '''''DO NOT''''' upload other people's keys to the keyservers without their permission!
 == KeyMaster ==

@@ Line 16: / Line 16: @@
 == ToDo for the KeyMaster ==
 # Generate '''Keysigning Key'''
-#:<pre>gpg --key-gen</pre>
+#:<pre>gpg --gen-key</pre>
 #* This can be a '''Sign Only''' key
 #* Use the '''Real Name''' field to identify this Keysigning event, eg. "KWLUG Keysigning 2013-12-02"

@@ Line 61: / Line 61: @@
 # Import the keys from the '''Keysigning Keyring''' into your keyring
 #:<pre>gpg --import keysigning-keyring</pre>
 # Sign the Public Key for each participant you've checked off.
 #* Also sign the '''Keysigning Public Key''' (optional, but creates a convenient record of participants)
 # Send each signed Public Key to its owner by e-mail, with copy to the KeyMaster.
 #* '''''DO NOT''''' upload other people's keys to the keyservers without their permission!

@@ Line 32: / Line 32: @@
 # Immediately before the keysigning create a '''Fingerprint List''' of all the KeyIDs, UserIDs and fingerprints in the keyring. Make sufficient copies for all participants.
 #:<pre>gpg --no-default-keyring --keyring=./keysigning-keyring --fingerprint > fingerprintlist.txt</pre>
-#* The Keymaster can send '''fingerprintlist.txt''' to all participants in an encrypted, signed e-mail, or participants can download the keyring and print their own
+#* The KeyMaster can send '''fingerprintlist.txt''' to all participants in an encrypted, signed e-mail, or participants can download the keyring and print their own
 #* The '''Keysigning Key''' should be the first key on the list.  Document editing might be necessary.
@@ Line 44: / Line 44: @@
 ##:<pre>gpg --no-default-keyring --keyring ./keysigning-keyring --import MyPublicKey.gpg</pre>
 ## Submit the updated keysiging keyring (Either upload it, or e-mail it to the KeyMaster).
-# '''OR''' E-mail your public key to the keymaster, let him do the work.
+# '''OR''' E-mail your public key to the KeyMaster, let him do the work.
 = At the Keysigning Party =
-# Keymaster distributes the '''Fingerprint List'''
+# KeyMaster distributes the '''Fingerprint List'''
-# Keymaster asks each participant on the '''Fingerprint List''' to make a Formal declaration
+# KeyMaster asks each participant on the '''Fingerprint List''' to make a Formal declaration
 #:<pre>Bob: "I'm Bob Jonkman, the User ID on my key is bjonkman@sobac.com and my GnuPG fingerprint is 04F7 742B 8F54 C40A E115 26C2 B912 89B0 D2CC E5EA"</pre>
-# The Keymaster asks for others to vouch for the participant:
+# The KeyMaster asks for others to vouch for the participant:
 #:<pre>Alice: "I've known Bob since the early days, and that's really him"</pre>
 # Everyone marks on their copy of the '''Fingerprint''' if they're sufficiently convinced that the participant really owns the key with that fingerprint.
-# The Keymaster repeats the process until all participants have made their declarations and been vouched for.
+# The KeyMaster repeats the process until all participants have made their declarations and been vouched for.
 = After the Keysigning Party =
@@ Line 63: / Line 63: @@
 # Sign the Public Key for each participant you've checked off.
 #* Also sign the '''Keysigning Public Key''' (optional, but creates a convenient record of participants)
-# Send each signed Public Key to its owner by e-mail, with copy to the Keymaster.
+# Send each signed Public Key to its owner by e-mail, with copy to the KeyMaster.
 #* '''''DO NOT''''' upload other people's keys to the keyservers without their permission!
-== Keymaster ==
+== KeyMaster ==
-# The Keymaster signs each participant's key with the '''Keysigning Secret Key''' to verify they've participated.
+# The KeyMaster signs each participant's key with the '''Keysigning Secret Key''' to verify they've participated.
-# The Keymaster updates the '''Keysigning Keyring''' with all the signed keys.
+# The KeyMaster updates the '''Keysigning Keyring''' with all the signed keys.
-# The Keymaster expires the '''Keysigning Key''' to close the keysigning event.
+# The KeyMaster expires the '''Keysigning Key''' to close the keysigning event.
 -----

← Older revision		Revision as of 22:31, 18 December 2013
Line 1:		Line 1:
−	* I'm running a formal keysigning after [[Encrypting E-mail with GnuPG, Thunderbird and Enigmail\|my presentation]] at KWLUG on Monday, 2 December 2013. These are the steps for both the keymaster ([[User:BobJonkman\|me]]) and the people attending. Feel free to make changes or additions as you see necessary. You may find some useful information in the [[Guidelines for Key Signing Parties]].
−	~~: [[User:BobJonkman\|BobJonkman]] 05:42, 9 October 2013 (UTC)~~
−
−	* There is now a '''Keysigning Keyring''' in the [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273&path=//kwlug-2013-12-02-keysigning kwlug-2013-12-02-keysigning folder] of the [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273&path= KWCrypto ownCloud repository] which will contain the public keys of all the participants.
−
−	~~: If you'd like to participate in the keysigning you can either:~~
−	~~# send me [mailto:bjonkman@sobac.com?subject=Public%20Key%20for%20Keysigning%20%5Bbjns%5d encrypted, signed e-mail] with your public key attached~~
−	# Download the '''Keysigning Keyring''', add your public key, then upload it to the [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273 KWCrypto ownCloud repository].
−	~~: [[User:BobJonkman\|BobJonkman]] 01:12, 26 October 2013 (UTC)~~
−
	= Purpose =		= Purpose =
	A keysigning is not meant to establish your absolute, one true, [https://support.google.com/plus/answer/1228271?hl=en Real] [https://www.facebook.com/help/112146705538576 Name]™ identity, it is merely to associate a keyID with your identity. The identity you use is up to you, as published in the UserID portion of your GnuPG/PGP key. It could be only an e-mail address, a nickname, or even your real name. It's how people identify you in correspondence, or associate you as the author of a document or software. By signing your key, people verify that the KeyID is associated with the identity by which they know you.		A keysigning is not meant to establish your absolute, one true, [https://support.google.com/plus/answer/1228271?hl=en Real] [https://www.facebook.com/help/112146705538576 Name]™ identity, it is merely to associate a keyID with your identity. The identity you use is up to you, as published in the UserID portion of your GnuPG/PGP key. It could be only an e-mail address, a nickname, or even your real name. It's how people identify you in correspondence, or associate you as the author of a document or software. By signing your key, people verify that the KeyID is associated with the identity by which they know you.

@@ Line 2: / Line 2: @@
 : [[User:BobJonkman|BobJonkman]] 05:42, 9 October 2013 (UTC)
-* There is now a [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273&download&path=//kwlug-keysigning-ring-2013-12-02.asc KWLUG Keysigning Ring] in the [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273 KWCrypto ownCloud] which will contain the public keys of all the participants.
+* There is now a '''Keysigning Keyring''' in the [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273&path=//kwlug-2013-12-02-keysigning kwlug-2013-12-02-keysigning folder] of the [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273&path= KWCrypto ownCloud repository] which will contain the public keys of all the participants.
 : If you'd like to participate in the keysigning you can either:
 # send me [mailto:bjonkman@sobac.com?subject=Public%20Key%20for%20Keysigning%20%5Bbjns%5d encrypted, signed e-mail] with your public key attached
-# Download [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273&download&path=//kwlug-keysigning-ring-2013-12-02.asc the keyring], add your public key, then upload it to  the [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273 KWCrypto ownCloud].
+# Download the '''Keysigning Keyring''', add your public key, then upload it to  the [http://sobac.com/owncloud/public.php?service=files&t=ba4835619abd5f390a3b655b3e9b7273 KWCrypto ownCloud repository].
 : [[User:BobJonkman|BobJonkman]] 01:12, 26 October 2013 (UTC)
 = Purpose =

← Older revision		Revision as of 17:49, 2 December 2013
Line 80:		Line 80:
	# The Keymaster expires the '''Keysigning Key''' to close the keysigning event.		# The Keymaster expires the '''Keysigning Key''' to close the keysigning event.

		+	-----
		+	== See Also: ==
		+	[[Informal Keysigning]]

	[[Category:KWCrypto]][[Category:HowTo]]		[[Category:KWCrypto]][[Category:HowTo]]

@@ Line 53: / Line 53: @@
 # Add your key to the '''Keysigning Keyring'''
 ## Export your Public Key
-##:<pre> gpg --export 0xYOURKEYID &gt; MyPublicKey.pgp</pre>
+##:<pre> gpg --export 0xYOURKEYID &gt; MyPublicKey.gpg</pre>
 ## Get a copy of the '''Keysigning Keyring'''
 ##*Either download it, or request that the KeyMaster e-mails it to you
 ## Add your public key to the '''Keysigning Keyring'''
-##:<pre>gpg --no-default-keyring --keyring ./keysigning-keyring --import alicepublickey.asc</pre>
+##:<pre>gpg --no-default-keyring --keyring ./keysigning-keyring --import MyPublicKey.gpg</pre>
 ## Submit the updated keysiging keyring (Either upload it, or e-mail it to the KeyMaster).
 # '''OR''' E-mail your public key to the keymaster, let him do the work.