On 01/10/15 15:18, Mark H. Wood wrote: > > To put my point more plainly: signatures on products and signatures > on keys mean different things, and to gain trust for them works in > different ways.
Another case where common PGP terminology is confusing. You don't really "sign a key", you certify that a particular identity should be bound to a key. This process uses the same algorithm as a signature, but the semantics are different - as evidenced by the fact that [C]ertify and [S]ign are distinct usages. A
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users