J-S --

...and then Jean-Sebastien Morisset said...
% I'm really enjoying GnuPG, especially the auto-fetch feature for unknown
% keys (which never worked for me in PGP). As I accumulate public keys, I'd

*grin*  Ah, the bliss of using the proper tool :-)


% like to lsign the keys (--lsign-key cmdarg) to remove that little warning.
% Unfortunately, there's no good way to authenticate the key.

Yep.


% 
% What do you guys do? Put up with the warning? Sign the key even if you're
% not sure? Use the X-PGP-Fingerprint header as a second validation? Use
% fingerprints in signatures?

I just put up with it unless I have the opportunity to meet up with
someone.  I'm considering using --lsign-key to keep things quiet but I
then need to figure out how to differentiate between locally signed and
globally signed keys for when I "care".


% 
% We should have a little poll. :-)

Here ya go :-)


% 
% Thanks,
% js.


:-D
-- 
David T-G                      * It's easier to fight for one's principles
(play) [EMAIL PROTECTED] * than to live up to them. -- fortune cookie
(work) [EMAIL PROTECTED]
http://www.justpickone.org/davidtg/    Shpx gur Pbzzhavpngvbaf Qrprapl Npg!

PGP signature

Reply via email to